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QFPIIPITV  "^ie  new 
OLUUm  1 1  302.111  security 

standard  will  help,  but 

protecting  wireless  LANs 

remains  a  very  complex  job. 

Here’s  why. 


J.D.  Edwards  Users  Still  Aren’t 
Sold  on  PeopleSoft’s  Takeover 


Customer  base  cites 
‘mixed  bag’  one  year 
into  new  ownership 

BY  MARC  L.  SONGINI 

Twelve  months  after  it  paid 
$1.8  billion  to  buy  business 
applications  rival  J.D.  Edwards 
&  Co.,  PeopleSoft  Inc.  has  yet 
to  get  a  big  sales  boost  from 
the  deal  or  anything  close  to 
the  kind  of  acclaim  it  had 
hoped  to  receive  from  the 
users  it  inherited. 


Based  on  interviews  with  15 
J.D.  Edwards  users  and  an  in¬ 
formal  poll  of  48  IT  managers 
that  was  conducted  last  week, 
PeopleSoft  is  far  from  winning 
over  its  new  customer  base. 

Five  of  the  users  who  were 
interviewed  said  unequivocal¬ 
ly  that  life  with  PeopleSoft  is 
better  than  it  was  under  J.D. 
Edwards.  But  several  said  it’s 
worse  in  at  least  some  aspects, 
and  the  others  indicated  that 
they’re  still  on  the  fence  about 
the  acquisition. 


The  poll  of  Computerworld 
subscribers  reflected  even 
sharper  attitudes  toward  the 
buyout,  which  PeopleSoft 
completed  last  Aug.  29  by  pur¬ 
chasing  the  remaining  J.D.  Ed¬ 
wards  shares  that  it  didn’t  al¬ 
ready  own.  Twenty-one  of  the 
J.D.  Edwards  users  who  re¬ 
sponded  said  PeopleSoft’s 
takeover  has  had  a  negative  ef¬ 
fect  on  them,  while  six  said 
the  deal  has  been  positive. 

In  addition,  29  of  the  respon¬ 
dents  said  they  would  have 
preferred  that  J.D.  Edwards  re¬ 
main  independent.  Ten  voiced 
support  for  the  company  be¬ 
ing  acquired. 

“It’s  a  mixed  bag,”  said  J.D. 
Edwards  user  Fredrick  Pond, 
referring  to  PeopleSoft’s  own¬ 
ership.  “They  are  our  key  ven- 
PeopleSoft,  page  13 


Q&A:  PeopleSoft  exec  Ram  Gupta 
says  J.D.  Edwards  users  now  have 
more  product  choices  and  better 
support. '  'age  13 


HP  Rushes  to  Fix 
Order  System, 
Reassure  Users 

Vendor  says  ‘worst  is  behind  us’  on  shipment 
snafus  caused  by  rollout  of  supply  chain  apps 


BY  PATRICK  THIBODEAU 

CHICAGO 

Hewlett-Packard  Co.  engaged 
in  damage  control  at  HP 
World  last  week,  telling  users 
it’s  working  in  “war  room” 
fashion  to  fix  the  order-proc¬ 
essing  problems  that  have  af¬ 
fected  its  shipments  of 
servers  and  storage  de¬ 
vices.  HP  also  said  its 
weak  third-quarter  re¬ 
sults  aren’t  a  harbinger 
of  any  changes  in  its 
technology  road  map. 

Joe  Nadler,  a  director  in  HP’s 
enterprise  systems  unit,  told 
customers  at  one  conference  fo¬ 
rum  that  the  company  expects 
its  server  and  storage  supply 
chain  “to  be  just  about  fully  re¬ 
covered  by  the  end  of  August.” 

“There’s  aggressive  plans  in 


place  to  make  sure  we  catch 
up  on  late  customer  orders, 
and  unfortunately,  we  did  have 
some  significant  delays,” 
Nadler  said.  But  he  added  that 
the  problems  have  been  iden¬ 
tified.  “We’re  now  completing 
the  fixes,”  he  said. 

Among  the  users  on 
the  receiving  end  of 
the  order-processing 
problems  was  Patrick 
Slattery,  a  systems 
manager  at  IDX  Sys¬ 
tems  Corp.  in  South 
Burlington,  Vt.  Slattery  or¬ 
dered  two  Intel-based  Pro¬ 
Liant  servers  from  HP  last 
month.  But  IDX,  which  devel¬ 
ops  software  for  health  care 
providers,  is  still  awaiting  the 
delivery  of  the  systems. 

HP  World,  page  41 


Sun  postpones 
its  SunNetwork 
conference: 
QuickLink 
48914 


Utility  to  Make 
IT  Framework 
Open-Source 

Hopes  other  users 
will  improve  its  work 

BY  CAROL  SLIWA 

Duke  Power  Co.  plans  to  go 
from  consumer  of  open- 
source  software  to  contributor 
on  Sept.  1  by  making  an  inter¬ 
nally  developed  application 
framework  available  to  other 


companies  through  the 
SourceForge.net  Web  site. 

The  Charlotte,  N.C.-based 
power  company  spent  about 
1,000  hours  over  the  course  of 
a  year  building  its  framework, 
which  supports  development 
of  applications  built  around 
Microsoft  Corp.’s  .Net  tech¬ 
nology.  By  turning  the  frame¬ 
work  over  to  the  open-source 
community,  Duke  hopes  that 
other  corporate  developers 
will  improve  on  its  work. 

“This  is  somewhat  of  an  ex¬ 
periment  to  see  how  much 

Duke,  page  9 
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The  new  stud  on  the  server  farm. 
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Presenting  the  new  Xserve5  G5,  a  wickedly  fast, 
extremely  compatible  and  refreshingly  affordable  1U 
server  from  Apple: 

With  dual  2GHz  64-bit  G5  processors,  it  achieves  blazing 
speeds  of  up  to  30  gigaflops.  It's  so  powerful,  in  fact,  that 
the  U.S.  government  is  deploying*  1 ,566  Xserve  G5  servers  to 
create  one  of  the  world's  fastest  supercomputers,  capable  of 
up  to  25  trillion  calculations  per  second. 

And  it  comes  complete  with  Mac  OS*  X  Server,  Apple's 
UNIX-based  operating  system  that  provides  a  complete  suite 
of  standards-based  network  services  with  no  per-clientfees. 
So  whether  you  have  Mac;  Windows,  UNIX  or  Linux  clients, 
Xserve  is  ideal  for  cross-platform  file  sharing,  hosting 
dynamic  websites,  streaming  audio  and  video  and  running 
powerful  J2EE  applications  -  right  out  of  the  box. 

Of  course,  its  most  impressive  feature  may  be  its 
price,  starting  at  just  $2,999t  The  new  Xserve  G5. 


TM  and  02004  Apple  Computer.  Inc  All  rights  reserved.  'Order  purchased  through  COLSA  Corp.  'SRP.  For  more  info,  call  I  -800-MY -APPLE  or  visit  www.apple.com/xsei  ve. 


Fr:  I  need  training  to  install  this 


To:  my  intern  installed  this 


EMC 

where  information  lives 


EMC1 


EMC  CLARiiON®  CHANGES  THE  WAY  YOU  THINK  ABOUT  STORAGE.  Announcing  the  CLARiiON  AX100. 

With  the  quality  and  high  availability  that  CLARiiON  is  known  for.  In  a  smaller  package  that’s  right  for 
any  business.  It’s  powerful,  yet  simple  to  manage.  SAN  ready.  User  installable.  With  replication  and 
management  functionality.  All  at  a  price  that’s  equally  small,  starting  at  $5,999.  To  learn  more,  visit 
www.EMC.com/backup.  Or  call  1-866-464-7381. 

Find  an  authorized  EMC  Velocity2  Partner  at  www.EMC.com/velocity. 


EMC2  EMC.  ClAJtirOM,  and  where  information  lives  ire  registered  trademarks  of  EMC  Corporation.  C  200*  EMC*  Corporation.  All  rights  reserved. 


Backing  Up  the  Edge 

In  the  Technology  section:  Thanks  to  data  repli¬ 
cation  and  disk-to-disk  backup  technologies, 

IT  is  increasingly  redirecting  remote  office 
backups  to  the  data  center,  where  they  can  be 
more  easily  and  reliably  managed.  Page  22 
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Rx  for  Success 

In  the  Management  section:  Why  do  doctors 
resist  hospital  safety  technology?  Because  it 
disrupts  workflow  and  slows  them  down. 
Here’s  how  to  get  safety  systems  right  and 
motivate  doctors  to  give  them  a  try.  Page  27 
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6  Intelligence  agencies  need 

a  technology  blueprint  and 
better  systems  integration  if  a 
proposed  overhaul  is  to  suc¬ 
ceed,  officials  testify  during 
congressional  hearings. 

7  Hurricane  Charley  didn’t 
catch  IT  managers  unpre¬ 
pared,  but  recovery  efforts 
were  complicated  by  telecom¬ 
munications  deficiencies. 

7  Ford  abandons  an  Oracle 

procurement  system  after  four 
years  in  favor  of  a  “proven” 
set  of  custom-developed 
mainframe  applications. 

8  EDS  gets  sued  by  the  U.K.’s 
largest  satellite  TV  broadcast¬ 
er  over  a  CRM  development 
deal  that  was  terminated  in 
2002.  But  the  IT  services  firm 
says  it  will  file  a  countersuit. 

8  Hewlett-Packard  plans  to 

offer  a  service  to  help  IT 
managers  scan  and  remediate 
security  vulnerabilities  in 
network  devices. 

9  Motorola  completes  the  latest 
phase  in  a  rollout  of  informa¬ 
tion  life-cycle  management 
software  in  its  PCS  unit’s 
North  American  operations,  as 
part  of  an  effort  to  cut  the  size 
of  its  production  databases. 

12  Many  IT  contracts  fail  to 

include  performance  criteria 
and  “guarantees”  from  vendor 
sales  pitches,  say  experts. 

12  Microsoft  tries  to  appeal  to 

mainframe  and  iSeries  users 
with  an  upgrade  of  its  Host 
Integration  Server  software. 


19  Wi-Fi  Plays  Defense.  The 

new  802.11i  wireless  LAN 
security  standard  is  a  big  step 
forward,  but  Wi-Fi  LANs  still 
have  some  vulnerabilities. 

24  Future  Watch:  Software  Flight 
Plan.  Paul  D.  Nielsen  used  to 
run  a  $3  billion  research  lab 
for  the  U.S.  Air  Force.  In  his 
new  role  as  CEO  of  Carnegie 
Mellon’s  Software  Engineer¬ 
ing  Institute,  the  retired  gen¬ 
eral  explains  how  his  experi¬ 
ence  will  benefit  the  SEI’s 
development  projects. 

25  Security  Manager’s  Journal: 
Antivirus  Service  Troubled  by 
TLS.  A  complex  Transport 
Layer  Security  deployment 
gets  messier  when  an  antivirus 
service  is  added  to  the  mix. 

MANAGEMENT 

30  IT  Survival 
Guide.  Forty 
years  in  IT 
have  taught 
Ace  Hardware 
CIO  Paul 
Ingevaldson  a  thing  or  two, 
and  in  this  valediction,  he 
shares  some  nuggets  with  his 
IT  colleagues. 

31  No  Free  Lunch.  Open-source 
software  is  free  —  or  is  it?  It 
comes  with  rights  and  obliga¬ 
tions,  and  attorney  Larry 
Rosen  says  IT  managers  need 
to  understand  both. 

32  Career  Watch.  Leveraging 
your  skills;  how  project  lead¬ 
ers  really  get  picked;  and  IBM 
hits  college  campuses. 


10  On  the  Mark:  Mark  Hall  looks 
at  automated  testing  process¬ 
es  for  remote  users  and  a 
managed  service  for  indus¬ 
trial  controls  monitoring. 

14  Maryfran  Johnson  distills  all 
of  the  IT  management  advice 
you’ll  ever  hear  into  three 
simple  mantras. 

14  Virginia  Robbins  dislikes 
companies  that  are  out  to 
make  as  much  money  as  pos¬ 
sible  in  the  short  term. 

15  David  Moschella  sees  ramifi¬ 
cations  for  workplace  IT  now 
that  employees  can  get  better 
gear  on  their  own. 

26  Tommy  Peterson  thinks  a  fed¬ 
eral  attempt  at  consolidating 
Americans’  electronic  health 
records  is  a  worthy  cause  — 
and  a  daunting  project. 

33  Edward  Smith  advises  against 
reacting  to  security  threats 
defensively,  because  adding 
technology  without  a  strategy 
can  leave  your  organization 
more  vulnerable. 

42  Frankly  Speaking:  Frank 

Hayes  notes  that  when  it 
comes  to  negotiating  with 
vendors,  if  you  can’t  walk 
away  from  the  table,  you  have 
no  leverage  at  all. 


DEPARTMENTS/RESOURCES 


At  Deadline  Briefs . 6 

News  Briefs . 10,12 

Letters . 15 

IT  Careers . 34 

Company  Index . 40 

How  to  Contact  CW . 40 

Shark  Tank  . 42 


QuickPoll  Results 


When  I’m  on  vacation,  I . . . 


Unplug 

completely 


Check  e-mail 
occasionally 


What’s  a 
vacation? 


SOURCE:  Computerworld  nonscientific  survey:  600  votes 

©  Take  this  week’s  QuickPoll  at  www.computerworld.com. 

XP  SP2:  What  You  Need  to  Know 

SOFTWARE:  Windows  XP  Service  Pack  2 
could  have  some  unexpected  effects  on  your 
company’s  applications,  mobile  workers  and 
more.  Two  Avanade  consultants  offer  advice 
on  how  to  prepare.  ©  QuickLink  48954 


Seven  Habits  of  Highly 
Effective  ID  Management 

SECURITY:  These  identity  management 
must-haves  can  help  you  choose  the  best 
system  for  your  company,  says  Computer 
Associates’  Bilhar  Mann.  ©  QuickLink  48182 

Blogosphere 

See  our  editors’  weblogs  on  security,  careers, 
operating  systems,  mobile/wireless  and 
more.  ©  QuickLink  a4000 


What’s  a  QuickLink? 

O  Throughout  each  issued 
Computerworld,  you'll 
see  five-digit  QuickLink  codes 
pointing  to  related  content  on 
our  Web  site.  Also,  at  the  end  of 
each  story,  a  QuickLink  to  that 
story  online  facilitates  sharing  it 
with  colleagues.  Just  enter  any 
of  those  codes  into  the  Quick¬ 
Link  box,  which  is  at  the  top  of 
every  page  on  our  site. 


ONLINE 

DEPARTMENTS 

Breaking  News 

©  QuickLink  a1510 

Newsletter 

Subscriptions 

©  QuickLink  a1430 

Knowledge  Centers 

©  QuickLink  a2570 

The  Online  Store 

©  QuickLink  a242Q 


6 


COMPUTERWQRLD  August  23, 2004 


NEWS 


www.computerworld.com 


IT  Hurdles  Complicate 
Intelligence  Overhaul 

Technology  blueprint,  better  integration 
needed  to  support  melding  of  agencies 


Nortel  Plans  Job 
Cuts,  SAP  Rollout 

Nortel  Networks  Ltd.  reported  es¬ 
timated  financial  results  for  the 
first  half  of  this  year  and  said  it 
will  lay  off  10%  of  its  workforce, 
or  about  3,500  employees.  To 
further  cut  costs,  Nortel  plans  to 
install  SAP  AG’s  business  appli¬ 
cations  throughout  its  operations 
and  eliminate  some  of  the  100- 
plus  systems  it  now  uses.  The 
company  also  said  CIO  Albert 
Hitchcock  now  reports  directly  to 
President  and  CEO  Bill  Owens. 

Brampton,  Ontario-based  Nor¬ 
tel,  which  is  restating  its  earnings 
back  to  2001,  said  it  expects  to 
file  full  financial  reports  for  the 
first  two  quarters  of  2004  and  re¬ 
vised  figures  for  all  of  last  year  by 
the  end  of  September.  The  net¬ 
working  equipment  vendor  also 
disclosed  that  it  has  fired  seven 
finance  executives  and  that  the 
Royal  Canadian  Mounted  Police  is 
launching  a  criminal  investigation 
into  its  accounting  practices. 


Oracle  to  Adopt 
Monthly  Patching 

Oracle  Corp.  said  it’s  moving  to  a 
monthly  release  cycle  for  soft¬ 
ware  patches,  similar  to  the  ap¬ 
proach  that  Microsoft  Corp. 
adopted  last  fall.  In  a  statement 
announcing  the  plan,  Oracle  said 
that  switching  to  a  more  pre¬ 
dictable  patching  schedule  “is  the 
right  thing  for  our  customers.” 
The  company  didn't  say  when  it 
expects  to  begin  the  monthly 
patch  releases. 


Short  Takes 

SAP  today  will  announce  that  the 
U.S.  Postal  Service  plans  to  in¬ 
stall  its  human  resources  soft¬ 
ware  to  support  the  agency’s 
700,000  workers.  The  SAP  appli¬ 
cations  will  replace  homegrown 
systems  that  are  25  years  old. . . . 
ORACLE  said  it  expects  within  the 
next  three  months  to  roll  out  a  de¬ 
layed  set  of  business  applications 
tailored  for  midsize  users  in  the 
U.S.  The  software  was  initially 
due  to  ship  last  year. 


BY  DAN  VERTON 

PPROXIMATELY  One 
year  after  the  forma¬ 
tion  of  the  Depart¬ 
ment  of  Homeland 
Security  —  which  was  the 
largest  reorganization  of  the 
federal  government  in  50 
years  —  the  U.S.  intelligence 
community  is  facing  a  similar 
overhaul  that  some  fear  could 
threaten  the  meager  progress 
made  so  far  on  information 
sharing  and  IT  integration. 

The  recently  released  9/11 
Commission  Report  outlines  a 
stinging  indictment  of  the 
government’s  information¬ 
sharing  efforts  and  calls  for 
the  appointment  of  a  national 
intelligence  director  with  full 
budgetary  authority  over  the 
country’s  15  intelligence  agen¬ 
cies  and  departments.  A  series 
of  congressional  hearings  last 
week  focused  on  the  long¬ 
term  impact  that  major  orga¬ 
nizational  changes  might  have. 

In  conjunction  with  the  pos- 


As  the  debate  about  adding  a  na¬ 
tional  intelligence  director  pro¬ 
ceeds,  two  government  reports 
are  shedding  new  light  on  an 
existing  dilemma:  If  DHS  CIO 
Steven  Cooper  can’t  wrestle  that 
agency’s  sprawling  bureaucracy 
into  submission,  can  any  IT  man¬ 
ager  be  expected  to  help  fix  the 
nation's  problems  with  sharing  of 
information  about  terrorism? 

In  July,  the  DHS  inspector 
general  issued  a  report  conclud¬ 
ing  that  Cooper  didn’t  have  the 
political  clout  needed  to  develop 
an  enterprise  architecture  inte¬ 
grating  the  IT  systems  of  the  22 
agencies  within  the  DHS. 

Cooper  “is  not  a  member  of 
the  senior  management  team 


sible  creation  of  a  Cabinet-lev- 
el  intelligence  director’s  post, 
the  Bush  administration  is 
preparing  to  establish  a  Na¬ 
tional  Counter  Terrorism  Cen¬ 
ter,  which  could  incorporate 
the  CIA’s  Terrorist  Threat  In¬ 
tegration  Center  and  other 
personnel  from  that  agency. 
But  questions  about  lines  of 
authority,  IT  systems  integra¬ 
tion  and  a  host  of  other  issues 
have  TTIC  Director  John 
Brennan  concerned. 

Any  information-sharing 
system  must  be  “based  on  a 
clear  understanding  of  who  is 
responsible  for  what,”  Bren¬ 
nan  told  members  of  the 
House  Select  Committee  on 
Homeland  Security.  There 
also  has  to  be  an  overall  blue¬ 
print  for  IT  investments,  in¬ 
cluding  strategic  prioritiza¬ 
tion,  interoperable  hardware 
and  software,  and  role-based 
data  access,  Brennan  said. 

Even  without  the  confusion 
that  might  arise  from  organi- 


with  authority  to  strategically 
manage  departmentwide  tech¬ 
nology  assets  and  programs,” 
the  inspector  general’s  report 
said.  It  added  that  there  is  no  for¬ 
mal  reporting  relationship  be¬ 
tween  Cooper  and  the  CIOs  of 
major  DHS  divisions. 

In  another  report  that  was 
submitted  to  Congress  on  Aug.  6 
and  made  public  last  week,  the 
Government  Accountability  Of¬ 
fice  (GAO)  found  that  the  DHS 
"does  not  yet  have  the  necessary 
architectural  blueprint  to  effec¬ 
tively  guide  and  constrain  its 
ongoing  business  transformation 
efforts  and  the  hundreds  of 
millions  of  dollars  that  it  is  invest¬ 
ing  in  supporting  information 


zational  changes,  homeland 
security  and  intelligence  agen¬ 
cies  are  struggling  to  over¬ 
come  IT  problems,  Brennan 
added.  The  issues  he 
cited  include  “a 
plethora  of  legacy 
information  systems 
and  networks  . . . 

[that]  impede  inter¬ 
operability.” 

Brennan  noted 
that  TTIC  analysts 
use  22  federal  net¬ 
works  that  are  divid¬ 
ed  into  “sanctums,” 
which  let  them  ac¬ 
cess  data  only  on  a 
need-to-know  basis. 

Smashing  organizational 
stovepipes  is  important,  but 
“it’s  not  sufficient  to  share 
hard-copy  information,”  he 
said. 

Some  members  of  Congress 
also  fear  that  the  proposed 
changes  might  complicate  the 
DHS’s  ongoing  effort  to  con¬ 
nect  state  and  local  officials  to 
the  new  Homeland  Security 
Information  Network. 

Two  weeks  ago,  the  DHS 
hosted  a  gathering  of  more 


technology  assets.” 

According  to  the  GAO,  the 
DHS’s  IT  blueprint  “is  missing 
most  of  the  content  necessary  to 
be  considered  a  well-defined  ar¬ 
chitecture.”  The  GAO  described  it 
as  “the  result  of  an  amalgama¬ 
tion  of  the  existing  architectures 
that  several  of  DHS’s  predeces¬ 
sor  agencies  already  had.” 

In  a  written  response  to  the  in¬ 
spector  general’s  report,  DHS 
deputy  secretary  Adm.  James 
Loy  disagreed  with  the  recom¬ 
mendation  that  Cooper  should  be 
part  of  the  senior  executive  team 
reporting  directly  to  him.  The  CIO 
is  “already  an  integral  member  at 
each  level  of  the  IT  investment 
review  process,”  Loy  wrote. 

The  DHS  acknowledged  the 
problems  with  its  enterprise  ar¬ 
chitecture  in  a  response  to  the 
GAO’s  report.  But  the  agency 


than  300  state  and  local  offi¬ 
cials  in  Washington  to  train 
them  to  handle  classified  fed¬ 
eral  information  that  will  be 
made  available  on  the  net¬ 
work,  said  Patrick  Hughes,  as¬ 
sistant  secretary  for  informa¬ 
tion  analysis  at  the  DHS.  The 
network  is  currently  being  de¬ 
ployed  and  should  be  fully  in 
place  by  year’s  end,  he  added. 

Even  so,  “I  don’t 
think  we  have  licked 
the  problem  of  com¬ 
plete  coordination 
between  the  federal 
government  and 
with  the  state  and  lo¬ 
cal  government  and 
private-sector  cus¬ 
tomers  for  finished 
intelligence,”  said 
committee  chairman 
Rep.  Christopher 
Cox  (R-Calif.). 

At  the  FBI,  there  is 
still  a  basic  need  for  secure 
communications,  said  Mau¬ 
reen  Baginski,  the  agency’s 
executive  assistant  director 
for  intelligence.  “Our  biggest 
need  is  secure  communica¬ 
tions  to  our  field  offices  and 
for  secure  [communications 
facilities],”  she  said.  “In  order 
to  join  this  large  intelligence 
community  and  be  a  healthy 
node  on  this  network,  we  have 
to  be  able  to  operate  in  the  en¬ 
vironment.”  O  48963 


added  that  the  GAO  had  mea¬ 
sured  its  progress  against  "unre¬ 
alistic”  expectations  of  how  com¬ 
prehensive  the  first  version  of  the 
architecture  would  be. 

Sateesh  Lele,  a  former  CIO  at 
Avon  Products  Inc.  and  General 
Motors  Corp.’s  European  opera¬ 
tions,  said  the  federal  govern¬ 
ment  desperately  needs  a  cultur¬ 
al  change.  Lele,  who  is  chairman 
of  San  Jose-based  IT  services 
firm  Global  Data  Systems  USA, 
noted  that  he  has  seen  the  same 
problems  in  the  private  sector. 

“I  have  seen  innumerable  ex¬ 
amples  of  this  organizational 
malaise  in  extremely  large  orga¬ 
nizations,  and  I  have  also  seen 
some  tough  actions  from  the  top 
which  have  fixed  the  problem,” 
he  said.  “This  is  not  an  IT  prob¬ 
lem.  It  is  a  cultural  problem." 

-  Dan  Verton 


Two  Reports  Criticize  DHS 
For  Lack  of  Progress  on  IT 


PATRICK  HUGHES 

says  the  DHS  will 
finish  the  rollout  of 
a  homeland  securi¬ 
ty  information  net¬ 
work  this  year. 
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In  Storm’s  Wake,  Fla. 
IT  Managers  See  Need 
For  Telecom  Upgrades 

Communications  problems  complicate 
recovery  efforts  after  Hurricane  Charley 


BY  LUCAS  MEARIAN 

As  Hurricane  Charley  blew 
through  Port  Charlotte,  Fla., 
on  Aug.  13,  Kathleen  Russell 
stood  in  a  dark  closet  15  miles 
away  with  a  flashlight  in  one 
hand  and  a  cell  phone  in  the 
other.  She  was  trying  to  find 
out  if  the  databases  at  the 
insurance  agency  where  she 
works  could  be  restored  in 
time  to  handle  claims  from 
its  15,000  customers. 

Russell’s  company,  Key 
Agency  Inc.  in  Englewood, 

Fla.,  had  contracted  with  a  dis¬ 
aster  recovery  services  firm  to 
replicate  its  customer  data  to  a 
backup  facility  in  Massachu¬ 
setts.  Workers  there  were  able 
to  restore  the  agency’s  data 
within  10  hours.  “That  to  me 
just  boggles  the  mind,”  said 
Russell,  Key’s  office  manager. 

IT  managers  in  the  areas  hit 


Switches  back  to 
mainframe  apps 


BY  MARC  L.  SONGINI 

Ford  Motor  Co.  is  pulling  the 
plug  on  a  4-year-old  procure¬ 
ment  system  based  on  Oracle 
Corp.’s  software  and  switching 
all  purchasing  operations  back 
to  the  mainframe  applications 
that  the  newer  technology  was 
designed  to  replace. 

Ford  has  invested  unspeci¬ 
fied  millions  of  dollars  in  the 
system,  which  was  dubbed 
Everest  and  built  around  Ora¬ 
cle’s  databases  and  business 
applications.  But  Ford 
spokesman  Paul  Wood  last 
week  confirmed  that  the  au¬ 
tomaker  has  decided  to  shut 
down  Everest  and  return  the 
purchasing  processes  that 
were  being  run  on  the  system 
to  a  set  of  custom-written 


by  Charley  said  last  week  that 
although  the  storm  took  an 
unexpected  path  through  the 
center  of  the  state,  they 
weren’t  wholly  unprepared 
because  of  lessons  learned 
from  Hurricane  Andrew  12 
years  earlier.  For  example, 
they  said,  Andrew  taught  them 
to  geographically  disperse 
their  data  center  operations. 

But  Charley  taught  some 
new  lessons,  such  as  the  need 
to  improve  communications. 

Dennis  Klinger,  CIO  at 
Florida  Power  &  Light  Co.  in 
Juno  Beach,  said  800,000  of 
the  utility’s  4.1  million  cus¬ 
tomers  in  western  and  south¬ 
ern  Florida  were  without  pow¬ 
er  last  week.  Recovery  opera¬ 
tions  were  going  remarkably 
smoothly  because  of  an  abun¬ 
dance  of  planning  and  past  ex¬ 
perience,  Klinger  added. 


mainframe  applications.  “We 
completed  an  evaluation  of  all 
the  production  and  nonpro¬ 
duction  procurement  systems 
and  made  the  decision  to  tran¬ 
sition  back  to  the  proven,  cur¬ 
rent  system,”  Wood  said. 

Dot-Com  Era  Origins 

The  development  of  Everest 
began  in  1999,  at  the  height  of 
the  dot-com  era.  According  to 
Wood,  the  project  was  sepa¬ 
rate  from  Covisint  Inc.,  a  Web- 
based  business-to-business  ex¬ 
change  for  the  automotive  in¬ 
dustry  that  Ford  and  Oracle 
helped  create.  Covisint  is  now 
owned  by  Compuware  Corp. 

Wood  said  Ford  started  to 
go  live  with  the  system  in 
2000.  He  declined  to  say  how 
many  suppliers  or  internal 
business  units  the  system  sup¬ 
ports,  but  he  noted  that  the 
technology  is  widely  used  in 


But  there  were  some  things 
that  Klinger  hadn’t  counted 
on.  “We  use  various  cell  and 
wireless  providers,”  he  said. 
“All  of  them  experienced  some 
very  serious  damage.”  Broken 
connectivity  between  cellular 
towers  hampered  the  ability  of 
the  utility’s  emergency  crews 
to  communicate,  he  said. 

Florida  Power  &  Light’s  800 
IT  workers  had  several  means 
of  communication,  including 
radios,  cell  phones  and  satel¬ 
lite-based  phones.  But  Klinger 
said  they  experienced  band¬ 
width-clogging  traffic  levels, 
particularly  with  the  satellite 
phones.  “We  need  to  look  at 
more  reliable  and  wider-band- 
width  satellite  communica¬ 
tions  that  we  can  implement 
more  quickly,”  he  said. 

Marvin  Shumacher,  director 
of  information  systems  at 
Heart  of  Florida  Regional 
Medical  Center  in  Davenport, 
just  outside  Orlando,  said  last- 
mile  network  issues  affected 
communications  at  the  hospi¬ 
tal.  The  electric-powered  cop¬ 
per  wires  running  into  the 
building  were  knocked  out  of 
service  by  the  storm,  he  said. 

But  the  hospital’s  network, 
data  center  and  radiology 
imaging  systems  remained 


some  form  throughout  Ford. 

Wood  also  wouldn’t  com¬ 
ment  about  any  problems  with 
the  system.  But  sources  indi¬ 
cated  that  Everest  was  ham¬ 
pered  by  poor  performance. 

Ford  now  plans  to  migrate 
some  features  from  Everest  to 
its  mainframe  system,  using 
in-house  developers.  Wood 
said  the  company  had  contin¬ 
ued  to  run  the  mainframe- 
based  procurement  software 
in  tandem  with  Everest. 

Oracle  issued  a  terse  state¬ 
ment  about  Ford’s  decision  to 
send  Everest  to  the  scrap 
heap.  “Oracle  continues  to 
support  Ford  on  its  back-to- 
basics  strategic  initiatives  and 
IT  projects,”  the  statement 
said.  “Given  our  desire  to  hon¬ 
or  a  nondisclosure  agreement 
in  effect,  it  would  be  inappro¬ 
priate  for  Oracle  to  comment 
on  any  specifics.”  O  48939 


online,  running  off  of  rack¬ 
mounted  battery  units  from 
American  Power  Conversion 
Corp.  in  West  Kingston,  R.I., 
while  backup  power  genera¬ 
tors  kicked  in. 

Heart  of  Florida’s  parent 
company,  Health  Management 
Associates  Inc.  in  Naples,  Fla., 
also  operates  Charlotte  Re¬ 
gional  Medical  Center  in  Pun- 
ta  Gorda  —  the  area  that  was 
hit  hardest  by  Charley. 

Because  of  the  storm’s  er¬ 
ratic  path,  the  Charlotte  facili¬ 
ty  didn’t  have  time  to  evacuate 


Public-access  Wi-Fi  hot  spots 
have  become  a  key  alternative 
for  business  and  personal  com¬ 
munications  in  the  wake  of 
Hurricane  Charley’s  devastat¬ 
ing  rampage  across  Florida. 

For  example,  the  Florida 
franchisee  for  Panera  Bread 
Co.  last  week  reported  a  50% 
increase  in  traffic  on  the  free 
Wi-Fi  wireless  LAN  service  of¬ 
fered  in  its  34  restaurants  in  the 
state.  John  Wetzel,  director  of 
operations  in  Florida  for  War¬ 
ren,  Ohio-based  Covelli  Family 
LLP,  said  he  thinks  that  about 
seven  in  10  of  the  Wi-Fi  users 
at  Panera  Bread  outlets  in  Flori¬ 
da  are  using  the  Internet  con¬ 
nections  for  business. 

“We  have  people  holding 
business  meetings  in  our 
stores,”  Wetzel  said,  noting  that 
the  loss  of  electricity  and  phone 
service  has  forced  companies 
to  resort  to  such  measures. 

People  looking  for  Internet 
access  are  also  seeking  out  in¬ 
dependent  Wi-Fi  hot  spot  oper- 


73  patients  or  its  staff  before  it 
hit,  Shumacher  said.  Charlotte 
Regional  lost  power  as  well  as 
its  roof  and  the  windows  on 
its  second  and  third  floors. 

But  Health  Management  As¬ 
sociates  replicates  data  from 
its  hospitals  to  backup  data 
centers  in  Atlanta  and  Boul¬ 
der,  Colo.,  according  to  Shu¬ 
macher.  Company  workers 
used  the  backup  data  and 
portable  generators  to  restore 
Charlotte  Regional’s  systems 
by  the  middle  of  last  week,  he 
said.  ©  48958 


ators.  Lee  Lorenzo,  general 
manager  of  the  Village  Inn  in 
the  Orlando  suburb  of  Winter 
Park,  said  her  restaurant  had  its 
power  turned  on  last  Thursday. 
Four  customers  were  already 
using  the  restaurant’s  Wi-Fi 
connection,  and  Lorenzo  had 
fielded  calls  from  several  other 
people  wanting  to  know  if  the 
service  was  operational 

Nate  Williams,  who  works 
as  an  event  planner  for  an  un¬ 
identified  company,  said  he  had 
just  finished  a  three-hour  Wi-Fi 
session  at  the  Village  Inn  -  the 
first  time  he  had  been  able  to 
log  onto  the  Internet  since  the 
storm  struck  on  Aug.  13. 

T-Mobile  USA  Inc.,  which 
provides  paid  Wi-Fi  hot  spots 
for  several  national  retail 
chains,  offered  free  services  in 
Florida  through  last  Monday. 

But  a  T-Mobile  spokesman 
wasn’t  able  to  provide  usage 
data  for  the  company’s  Wi-Fi 
outlets  in  the  state. 

-  Bob  Brewin 


Ford  Abandons  Oracle  Procurement  System 


Wi-Fi  Hot  Spots  Keep  Users  Online 


Broadcaster  Sues  EDS 
Over  CRM  Contract 


U.K.  satellite  TV  company  claims  firm 
failed  to  fulfill  system  development  deal 


BY  MARC  L.  SONGINI 

HE  U.K.’S  LARGEST 

satellite  TV  broad¬ 
caster  sued  Elec¬ 
tronic  Data  Systems 
Corp.  last  week  over  a  $109 
million  CRM  development 
contract  that  was  signed  in 
late  2000  and  then  terminated 
two  years  ago. 

London-based  British  Sky 
Broadcasting  Group  PLC 
said  it  had  filed  a  legal  claim 
against  EDS  for  “deceit,  negli¬ 
gent  misrepresentation  and 
breach  of  contract”  during  the 
implementation  of  a  CRM  sys¬ 
tem  designed  to  support  oper¬ 
ations  at  BSkyB’s  call  centers. 
A  company  spokesman  de¬ 
clined  to  disclose  the  amount 
of  money  that  BSkyB  is  seek¬ 
ing  from  EDS. 

BSkyB  severed  its  relation¬ 
ship  with  EDS  in  early  2002 
after  the  IT  services  firm 
“failed  to  perform  its  contrac¬ 
tual  obligations,”  according  to 
a  statement  issued  by  the 
broadcaster  last  week.  After 
the  deal  was  ended,  BSkyB 
subsidiary  Sky  Subscribers 
Services  Ltd.  took  over  inte¬ 
gration  work  on  the  CRM 
project,  which  is  expected  to 
be  completed  “in  the  near  fu¬ 
ture,”  the  company  said. 

Contract  Troubles 

The  lawsuit  is  another  poten¬ 
tial  black  eye  for  EDS,  which 
has  been  struggling  with  prob¬ 
lematic  contracts  such  as  its 
intranet  deal  with  the  U.S. 
Navy  and  an  agreement  to  de¬ 
velop  a  voice-over-IP  network 
for  The  Dow  Chemical  Co. 
Dow  and  EDS  agreed  to  end 
their  contract  in  July,  and  Dow 
this  month  named  IBM  to  take 
over  as  lead  contractor 
[QuickLink  48668]. 

EDS  spokesman  Malcolm 
George  said  the  Plano.  Texas- 
based  company  had  yet  to  re¬ 
ceive  BSkyB’s  lawsuit.  But  he 


added  that  EDS  denies  its  for¬ 
mer  client’s  claims  and  is 
ready  to  fight  in  court.  “We’re 
going  to  vigorously  defend  our 
position,  and  there  will  be  a 
counterclaim  in  the  several 
millions  of  [British]  pounds 
for  unpaid  bills,”  George  said. 
“It’s  absolutely  outrageous.” 

BSkyB  said  it  filed  the  law¬ 
suit  after  settlement  discus¬ 
sions  between  the  two  compa¬ 
nies  failed.  At  issue  is  a  system 
that  was  to  be  built  around 
hardware  from  Sun  Microsys¬ 
tems  Inc.  and  CRM  software 
from  Cupertino,  Calif. -based 


Tools  to  let  users 
find,  fix  flaws  in 
network  devices 

BY  JAIKUMAR  VIJAYAN 
AND  PATRICK  THIBODEAU 

Hewlett-Packard  Co.  last  week 
said  it  plans  by  year’s  end  to 
offer  a  security  vulnerability 
scanning  and  remediation  ser¬ 
vice  that’s  designed  to  help 
companies  identify  and  fix 
weak  spots  on  their  networks. 

The  as-yet-unnamed  service 
will  be  based  on  technology 
called  Active  Countermea¬ 
sures,  which  HP  has  been  test¬ 
ing  internally  for  more  than 
two  years,  according  to  Tony 
Redmond,  vice  president  and 
chief  technology  officer  at  the 
HP  Services  business  unit. 

The  scanning  tools  will  al¬ 
low  IT  managers  to  identify 
flaws  in  any  devices  on  their 
networks,  including  servers, 
PCs  and  “transiently”  con¬ 
nected  products  such  as  hand¬ 
held  computers,  Redmond 
said.  It  can  also  protect  net- 


Chordiant  Software  Inc., 
which  specializes  in  business- 
to-consumer  applications. 

The  BSkyB  spokesman  con¬ 
firmed  that  the  Chordiant 
software  is  still  being  used, 
but  he  declined  to  offer  fur¬ 
ther  details  about  the  project. 
When  the  deal  with  EDS  was 
announced  in  2000,  BSkyB 
said  it  planned  to  use  the 
CRM  system  to  integrate  dis¬ 
parate  data  sources  and  create 
more  comprehensive  cus¬ 
tomer  profiles.  In  addition,  the 
company’s  subscribers  would 
be  able  to  access  information 
such  as  account  and  billing 
data  via  phone  calls,  the  Web 
or  interactive  TV  services. 

Although  the  contract  with 


works  via  measures  such  as 
installing  patches,  imposing 
network  access  restrictions  or 
quarantining  vulnerable  or  in¬ 
fected  systems. 

The  move  by  HP  will  put  it 
in  a  crowded  field.  IBM,  Com¬ 
puter  Associates  International 
Inc.  and  IT  security  vendors 
such  as  Internet  Security  Sys¬ 
tems  Inc.  and  Qualys  Inc.  offer 
similar  services  or  products 
for  automated  vulnerability 
assessment,  discovery,  reme¬ 
diation  and  reporting. 

Whether  HP  would  have  an 
advantage  over  its  rivals  will 
depend  on  the  specifics  of  its 
offering,  said  Rusty  Robinson, 
a  technical  manager  at  Intrado 
Inc.,  a  Longmont,  Colo.-based 
provider  of  9-1-1 
infrastructure  sys¬ 
tems  and  services. 

HP  “would  just  be 
one  more  compa¬ 
ny  in  the  market¬ 
place  to  get  those 
services  from,” 
he  said. 

The  fact  that 


EDS  was  valued  at  $109  mil¬ 
lion,  BSkyB  said  in  its  state¬ 
ment  that  it  has  spent  a  total 
of  $310.8  million  on  software, 
systems  integration,  infra¬ 
structure  costs  and  a  revamp 
of  its  call  center  facilities.  The 
company  expects  to  spend  an¬ 
other  $91  million  during  the 
next  four  years  to  finish  the 


HP  is  among  the  larger  ven¬ 
dors  to  offer  such  a  service 
is  noteworthy,  said  David 
Krauthamer,  director  of  infor¬ 
mation  services  at  Advanced 
Fibre  Communications  Inc.,  a 
maker  of  telecommunications 
equipment  in  Petaluma,  Calif. 
“The  market  has  been  pretty 
niched  so  far,”  Krauthamer 
said.  “HP  can  certainly  bring 
their  clout  and  scale  to  the 
market.” 

Broad  Access  Needed 

But  the  “fairly  wide  access”  to 
internal  systems  that  HP  or 
other  providers  of  such  ser¬ 
vices  would  need  makes  the 
offering  a  no-go  at  Danfoss 
A/S,  said  Brian  Andersen,  a 

systems  program¬ 
mer  at  the  Den¬ 
mark-based  man¬ 
ufacturer  of  hy¬ 
draulic  systems, 
compressors  and 
other  industrial 
equipment.  Dan¬ 
foss  does  its  own 
vulnerability  test- 


rollout  and  maintain  the  CRM 
system  for  its  subscriber  base, 
which  now  stands  at  about 
7  million.  ©  48922 


CASE  CLOSED 

EDS  and  the  U.K.'s  National  Health  Service 
settle  a  dispute  over  another  contract: 
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ing,  a  job  it  wants  to  keep  in- 
house  “so  we  know  ourselves 
what’s  going  on  and  how  to  fix 
it,”  Andersen  said. 

The  new  service  isn’t  HP’s 
first  foray  into  IT  security. 
Since  last  September,  it  has 
bought  security  tools  through 
acquisitions  of  Baltimore 
Technologies  Inc.,  Novadigm 
Inc.  and  TruLogica  Inc. 

But  so  far,  HP  has  done  a 
poor  job  of  articulating  how  it 
plans  to  use  the  technologies 
to  benefit  users,  said  Pete 
Lindstrom,  an  analyst  at  Spire 
Security  LLC  in  Malvern,  Pa. 

“HP  could  probably  be  a  for¬ 
midable  player  if  they  wanted 
to,”  Lindstrom  said.  But,  he 
added,  “HP  seems  to  wax  and 
wane  in  the  security  space.” 
Less  than  a  year  after  the  Bal¬ 
timore  Technologies  purchase, 
for  instance,  “you  just  don’t 
hear  about  the  technology 
anymore,”  he  said. 

Raymond  said  HP  plans  to 
roll  out  a  suite  of  identity 
management  tools  next  year 
based  on  technology  from  Bal¬ 
timore  and  TruLogica.  It  also 
is  setting  up  a  Trusted  Com¬ 
puting  initiative  designed  to 
deliver  securely  configured 
hardware  and  software  to 
users,  he  said.  ©  48967 


HP  to  Offer  Vulnerability  Scanning 
Service  as  Part  of  IT  Security  Push 
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Motorola  Uses  ILM  Tools  to  Control  Database  Growth 


Software  migrates  data  off  its  servers  to 
cut  capacity  needs,  boost  performance 


BY  LUCAS  MEARIAN 

Motorola  Inc.  last  week  said  it 
has  completed  the  second  of 
four  phases  in  a  planned  com¬ 
panywide  rollout  of  informa¬ 
tion  life-cycle  management 
(ILM)  software  that  has  cut 
the  size  of  production  data¬ 
bases  by  as  much  as  50%  in 
some  business  units. 

The  database  reductions  are 
enabling  Motorola  to  stave  off 
additional  server  and  storage 
purchases  as  the  company 
consolidates  its  hardware  in¬ 
frastructure  by  moving  sys¬ 
tems  from  remote  locations  to 
a  data  center  in  Chicago,  said 
Bill  Brewer,  global  IT  configu¬ 
ration  manager  at  Motorola’s 
Personal  Communications 
Sector  (PCS)  business  unit. 

The  ILM  rollout  should  also 
help  Motorola  better  meet  the 
financial  reporting  require¬ 
ments  of  the  Sarbanes-Oxley 
Act  by  keeping  data  online 
and  easily  accessible  without 
eating  up  space  on  application 
servers,  according  to  Brewer. 

He  declined  to  disclose  the 
cost  of  the  project,  other  than 
to  say  that  it’s  a  multimillion- 
dollar  initiative. 

Schaumburg,  Ill.-based  Mo¬ 
torola  is  using  OuterBay  Tech¬ 
nologies  Inc.’s  Application 
Data  Management  software  to 
manage  data  growth  in  ERP 
systems  built  around  Oracle 
Corp.’s  databases  and  E-Busi- 


Reasons  for  adopting 
ILM  and  database 
archiving  tools 

Smaller  database  sizes  can 
improve  query  performance. 

Database  recovery  times  can 
be  shortened  because  there  is 
less  data  to  restore. 

IT  managers  can  keep  fewer 
copies  of  databases,  saving 
more  storage  space. 

Historical  data  can  be  kept 
online  to  help  meet  regulatory 
requirements. 


ness  Suite  applications,  Brew¬ 
er  said.  Historical  customer 
account  information  is  auto¬ 
matically  migrated  from  pro¬ 
duction  databases  running  on 
Sun  servers  to  EMC  Corp.’s 
Symmetrix  disk  arrays. 

“As  Oracle  applications  ma¬ 
ture,  you  use  more  disk  space 
. . .  so  you  will  be  taxing  your 
database  at  a  higher  level,” 
Brewer  said.  “There’s  only  so 


Continued  from  page  1 

Duke 

value  can  be  gained  from  the 
open-source  community,”  said 
Charlie  Ward,  the  utility’s 
manager  of  technical  architec¬ 
ture.  He  added  that  because 
Duke’s  developers  have  been 
active  users  of  open-source 
software,  they  now  want  to 
give  something  back  to  open- 
source  developers. 

It’s  difficult  to  gauge  how 
many  other  user  companies 
have  turned  significant  appli¬ 
cation  development  initiatives 
into  open-source  projects. 

Patrick  McGovern,  director 
of  SourceForge.net,  said  the 
site  gets  about  70  new  open- 
source  projects  each  day,  but 
it  doesn’t  track  their  lineage. 
He  said  what  Duke  is  doing  is 
“certainly  not  unique,”  but  he 
couldn’t  provide  an  estimate 
of  how  many  similar  projects 
have  been  launched. 

Earlier  this  year,  Brunswick 
Corp.’s  Web  Den  Interactive 
(WDI)  technology  subsidiary 
used  SourceForge.net  to  re¬ 
lease  an  open-source  business- 
integration  engine  that  it  had 
built  to  help  connect  WDI’s  in¬ 
dependent  dealers.  But  Vernon 
Hills,  Ill.-based  WDI  has  now 
released  its  application  inte¬ 
gration  tool  as  a  commercial 
product,  called  Redberri,  said 
a  WDI  spokesman. 

Mark  Driver,  an  analyst  at 
Gartner  Inc.,  said  he  has  heard 
about  individual  programmers 
getting  permission  from  their 


much  tuning  you  can  do.  So 
it’s  either  rip  the  data  out  or 
do  something  else.” 

Motorola  has  set  the  ILM 
software’s  policy  engine  to 
migrate  data  that  hasn’t  been 
accessed  by  end  users  for  15 
months.  The  PCS  business 
unit  initially  rolled  out  Cuper¬ 
tino,  Calif. -based  OuterBay’s 
software  in  its  China  opera¬ 
tions  in  2001  and  was  able  to 
cut  database  sizes  in  half 
there. 

The  company  completed 
the  North  America  rollout  of 


employers  to  make  software 
components  available  under 
open-source  licenses.  But  Dri¬ 
ver  said  he  hasn’t  seen  any  ma¬ 
jor  companies  make  significant 
portions  of  their  custom  devel¬ 
opment  work  open-source. 

Many  companies  have  been 
hesitant  to  release  their  work 
on  an  open-source  basis  be¬ 
cause  of  intellectual  property 
concerns,  Driver  said.  He 
added  that  service  and  support 
are  also  issues  because  open- 
source  projects  require  com¬ 
mitments  of  time  and  money. 
“What  doesn’t  work  is  just 
dumping  the  software  onto  a 
developer  portal,”  he  said. 

Thomas  Murphy,  an  analyst 
at  Meta  Group  Inc.,  also  said 
that  lots  of  companies  have  re¬ 
leased  pieces  of  their  code  to 
the  open-source  community. 
But  he  doesn’t  think  many  will 
push  out  frameworks  like  the 
one  Duke  is  releasing.  “Shar¬ 
ing  your  competitive  differen¬ 
tiators  normally  is  seen  as  a 
bad  idea  in  commercial  enti¬ 
ties,”  Murphy  said. 

Seeking  Support 

But  Duke  doesn’t  view  the 
framework  as  a  competitive 
advantage.  “Duke  Power  is  not 
a  software  company.  We’re  an 
energy  company,”  Ward  said. 
“We’re  more  interested  in  get¬ 
ting  continued  support  from 
the  open-source  community 
to  improve  our  software.” 

The  idea  for  the  open-source 
contribution  took  shape  as 
Duke  began  to  define  an  enter¬ 
prisewide  architecture  to  sup- 


the  software  in  mid-July  and 
plans  to  finish  similar  projects 
in  European  and  South  Ameri¬ 
can  operations  by  the  end  of 
2005,  Brewer  said. 

He  added  that  the  rollout 
in  North  America  has  boosted 
performance  on  the  PCS  unit’s 
Oracle  database  servers  by 
62%,  mostly  as  a  result  of  the 
reduction  in  data. 

At  the  Bleeding  Edge 

Ray  Paquet,  an  analyst  at 
Stamford,  Conn.-based  Gart¬ 
ner  Inc.,  said  database  archiv- 


DUKE  ENERGY  designed  its  appli¬ 
cation  framework  to  support 
business  needs  and  reduce  IT 
development  costs. 


port  its  business  needs  and  re¬ 
duce  development  costs,  ac¬ 
cording  to  Ward.  Duke  wanted 
a  common  framework  to  en¬ 
force  consistency,  reduce  the 
amount  of  work  its  developers 
need  to  do  and  help  them 
transition  from  Microsoft’s 
Visual  Basic  6  to  the  object- 
oriented  development  tools 
they  will  use  with  the  newer 
Visual  Studio  .Net  technology. 

The  framework  that  Duke 
will  release  under  the  open- 
source  Common  Public  Li¬ 
cense  includes  a  data  abstrac¬ 
tion  and  data  access  layer; 
exception  logging  (built  on 
Log4net  open-source  technol¬ 
ogy);  EncryptionHelper, 
which  aids  in  encapsulating 
encryption/decryption  se¬ 
quences;  XMLHelper  for  seri¬ 
alization  and  deserialization  of 
objects  to  and  from  XML  and 
XML  schema  validation;  Secu- 
rityHelper,  for  authenticating 
and  authorizing  against  an  Ac- 


ing  products  from  companies 
such  as  OuterBay,  Princeton 
Softech  Inc.  and  Applimation 
Inc.  are  still  on  the  bleeding 
edge  of  technology.  But 
they’re  prompting  a  flood 
of  inquiries  from  prospective 
users,  he  added. 

Slow  database  throughput 
due  to  a  glut  of  data  is  “a  busi¬ 
ness  problem,  not  a  technol¬ 
ogy  problem,”  Paquet  said. 

IT  managers  need  to  get  the  I 

business  side  involved  early 
on  to  decide  issues  such  as 
what  data  should  be  archived, 
how  long  it  should  be  kept  and 
who  can  access  it,  Paquet  ad¬ 
vised.  ©  48944 


tive  Directory  domain;  and  an 
XMLMessage  object. 

In  addition,  Duke  will  re¬ 
lease  models  and  Unified  Mod¬ 
eling  Language  diagrams  that 
describe  how  the  pieces  can  be 
used  with  .Net  applications. 
Demonstration  applications 
will  also  be  included,  as  will 
Microsoft’s  freely  available 
SQL  Helper  Data  Access  tool. 

To  spread  the  word  about 
its  open-source  contribution, 
Duke  plans  to  make  a  presenta¬ 
tion  next  month  before  the 
750-member  Enterprise  Devel¬ 
opers  Guild  in  Charlotte.  Marc 
Ginns,  a  lead  application  devel¬ 
oper  at  Duke,  said  the  company 
already  has  received  four  pages 
of  suggested  additions  and 
changes  to  the  framework  from 
guild  members. 

Bill  Jones  Jr.,  president  of 
the  guild  and  a  software  archi¬ 
tect  at  Charlotte-based  Meta- 
Logix  Inc.,  said  a  group  of  de¬ 
velopers  in  the  local  Microsoft 
community  are  excited  about 
the  Duke  project’s  potential  to 
increase  productivity.  He  said 
the  “reference  architecture” 
will  let  the  developers  focus 
on  business  logic  instead  of 
low-level  plumbing. 

“They’ve  put  together  sev¬ 
eral  key  components  common 
to  most  projects,  whether  Web 
or  Windows,”  Jones  said  about 
Duke.  “They  worked  out  the 
architecture  and  thought 
through  how  things  should 
work  together.  I  won’t  say 
they’ve  solved  every  problem, 
but  they’ve  solved  a  lot  of  the 
big  ones.”  ©  48960 
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Microsoft  Delays 
SP2  Updates . . . 

Microsoft  Corp.  postponed  the 
start  of  automatic  distribution  of 
Windows  XP  Service  Pack  2  to 
corporate  users  after  IT  managers 
told  the  vendor  that  they  needed 
more  time  to  configure  systems  to 
block  the  update.  Many  compa¬ 
nies,  including  IBM,  want  to  delay 
installations  of  SP2  until  they  can 
test  its  compatibility  with  their 
applications  [QuickLink  48777]. 
Microsoft  pushed  back  the  launch 
of  automated  SP2  updates  for 
Windows  XP  Professional  from 
Aug.  16  to  this  Wednesday. 


. . .  And  Discloses 
Possible  App  Issues 

Microsoft  has  also  published  a  list 
of  nearly  50  applications  and 
games  that  may  not  work  properly 
after  users  install  SP2.  The  list  in¬ 
cludes  Microsoft  products  such 
as  Systems  Management  Server 
2003,  plus  software  from  Syman¬ 
tec  Corp.,  Macromedia  Inc.  and 
Computer  Associates  International 
Inc.  The  conflicts  involve  a  firewall 
built  into  SP2,  Microsoft  said. 


CA  Buys  PestPatrol 
To  Target  Spyware 

Computer  Associates  said  it 
has  acquired  PestPatrol  Inc.,  a 
Carlisle,  Pa.-based  developer  of 
antispyware  software,  for  an 
undisclosed  price.  CA  plans  to  in¬ 
corporate  PestPatrol’s  products 
into  its  eTrust  Threat  Manage¬ 
ment  software  suite,  which  in¬ 
cludes  tools  designed  to  protect 
corporate  networks  against  virus¬ 
es,  spam  and  inappropriate  use  of 
the  Web  by  employees. 

McAfee  to  Acquire 
IT  Security  Vendor 

In  another  security-related  acqui¬ 
sition,  McAfee  Inc.  in  Santa  Clara, 
Calif.,  said  it’s  buying  Foundstone 
Inc.  for  $86  million  in  cash.  Mis¬ 
sion  Viejo,  Calif.-based  Foundstone 
sells  software  for  detecting  and  re¬ 
mediating  software  vulnerabilities. 
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Remote  App  Testing 
Comes  Home . . . 


. . .  for  Starwood  Hotels  and  Resorts  Worldwide  Inc.,  which 
is  in  the  first  phase  of  automating  software  testing 
for  remote  users  of  its  homegrown  and  commercial 
applications.  According  to  Mark  Badeau,  manager 
for  enterprise  QA,  his  quality  assurance  team  was 
“challenged  by  the  testing  environment.”  That’s  an 


understatement.  Software 
that  was  created  or  integrat¬ 
ed  centrally  at  the  White 
Plains,  N.Y.-based  company 
often  was  destined  to  oper¬ 
ate  remotely  at  one  of  the 
750  properties  in  80  coun¬ 
tries  that  Starwood  manages. 
Getting  the  end  users  to  put 
the  programs  through  their 
paces  without  major  logistics 
hassles  was  a  pain.  Enter 
Austin-based  Surgient  Inc. 

Its  VQMS  technology  lets  re¬ 
mote  users  access  and  work 
with  an  application  through 
a  browser  as  if  the  code  were 
running  locally.  Pam  Thorn¬ 
ton,  Starwood’s  director  of 
software  engineering,  says 
she  “was  comfortable  work¬ 
ing  with  a  young  company 
because  they  had  seasoned 
folks  who  understood  and 
leveraged  best  practices  for 
testing.”  In  addition  to  the 
remote  user  access,  Badeau 
praises  VQMS  because  it  lets 
him  provision  a  test  machine 
and  lock  it  down,  run  the 
tests  and  then  automatically 


reset  the  system  for  the  next 
operation.  Reconfiguring  and 
preparing  a  computer  for  a 
test  once  took  hours  but  now 
takes  just  a  moment  or  two, 
he  says.  Surgient  CEO  Bill 
Daniel  says  that  later  this 
year  or  early  next,  Starwood 
and  others  can  use  an  up¬ 
graded  VQMS  with  out-of- 
the-box  integration  with  test¬ 
ing  tools  from  Seque  Soft¬ 
ware  Inc.,  IBM’s  Rational  di¬ 
vision  and  Mercury  Interac¬ 
tive  Corp.  Pricing  starts  at 
around  $25,000.  But  think 
of  the  money  you  save  by 
not  having  to  reprovision 
machines  for  every  test. 

And  those  hotel  bills  from 
end  users  visiting  the  testing 
center  will  disappear. 

Apple’s  Resurgence  in 
Life  Sciences  May . . . 

. . .  polish  its  image  for  Wall 
Street  IT  users.  That’s  a  sce¬ 
nario  painted  by  Jeff  Augen, 
CEO  of  TurboWorx  Inc.  in 
Shelton,  Conn.  He  contends 
that  Apple  Computer  Inc.’s 


high-end 
Macs  have  “a 
technological 
head  start” 
over  Intel- 
based  ma¬ 
chines  be¬ 
cause  they’re 
fully  64-bit 
and  “really, 
really  fast.” 

That  head 
start  appeals  to  organizations 
that  demand  high-perfor¬ 
mance,  clustered  systems.  In 
the  life  sciences  market,  Au¬ 
gen  foresees  clusters  of  Macs 
(and  Linux  systems)  using  his 
company’s  TurboWorx  Enter¬ 
prise  technology  displacing 
multiprocessor  Unix  servers 
from  Sun  Microsystems  Inc. 
and  IBM.  Michael  Swenson, 
an  analyst  at  Life  Sciences  In¬ 
sights,  an  IDC  company  in 
Framingham,  Mass.,  agrees. 
“We  see  an  uptick  in  interest 
in  Apple”  among  life  sciences 
users,  he  says.  But  Augen 
thinks  Apple  might  leverage 
one  success  for  another.  He 
claims  that  financial  services 
companies  with  high-perfor¬ 
mance  computing  needs  are 
showing  serious  interest  in 
TurboWorx  Enterprise  to  de¬ 
ploy  and  manage  CPU-cycle- 
sucking  applications  —  even 
on  clustered  Macs  with  the 
Unix-based  OS  X  operating 
system.  That  doesn’t  surprise 
Tom  Barton.  He’s  the  CEO  of 
Rackable  Systems  Inc.  in  Mil¬ 
pitas,  Calif.,  whose  clustered, 
high-performance 
computers  appeal 
to  the  technically 
sophisticated 
users  on  Wall 
Street.  And  while 
he  doesn’t  have  a 
deal  now  for  Macs 
to  be  used  in  his 
advanced  low- 
power,  thermal- 
managed  racked 
systems,  he  “sees 
an  opportunity  to 
cooperate  with 
Apple  for  the  fi¬ 
nancial  market.” 


Industrial  Controls 
Meet  IT . . . 

. . .  in  a  new  managed  service 
from  Betrusted  Inc.  The  New 

York-based  security  service 
provider  is  teaming  with 
industrial  controls  monitor¬ 
ing  company  Verano  Inc.  in 
Mansfield,  Mass.,  to  offer  the 
latter’s  Industrial  Defender 
as  a  managed  service.  Indus¬ 
trial  Defender  is  a  security- 
hardened  Linux  appliance 
that  monitors  the  health  of 
industrial  machinery  such  as 
turbines.  Verano  CEO  Brian 
Ahern  says  speculation  about 
a  “combination  9/11  plus  the 
East  Coast  blackout  is  more 
than  a  bad  dream.”  He  argues 
that  the  nation’s  critical  infra¬ 
structure  suffers  from  “a  gap 
as  to  who’s  responsible”  when 
industrial  control  systems  can 
be  sabotaged  over  the  Inter¬ 
net.  Is  it  plant  operations  per¬ 
sonnel  or  staff  in  the  IT  data 
center?  Ahern  suggests  com¬ 
bining  the  roles  through  a 
managed  security  service. 

The  integration  of  Industrial 
Defender’s  data  and  alerts  into 
Betrusted’s  10  global  data  cen¬ 
ters  will  be  complete  in  Q4. 

Rackable  Scales  Out . . . 

...  its  server  line  with  up  to  184 
64-bit  Intel  CPUs  in  a  single  rack. 

Late  this  month,  the  Scale  Out 
Server  Series  from  Rackable 
Systems  will  add  Intel  Corp.’s 
Xeon  64-bit  dual-processor 
chip  sets  to  the  32 -bit  Xeon 
processors  from  Intel  and 
the  64-bit  Opteron 
chips  from  Ad¬ 
vanced  Micro  De¬ 
vices  Inc.  that  are 
already  available. 
Rackable’s  unique 
cooling  technology 
through  the  center 
of  the  rack  lets  you 
pack  more  proces¬ 
sors  per  system 
than  most.  Pricing 
starts  at  S2.800. 

O  48636 

Rackable’s  184  well- 
cooled  processors 


HP  Blades,  now  in  a  bundle,  which  is  exactly  what  you'll  save. 


Save  over  30%  with  our  blade  bundle  featuring  two  HP  ProLiant  BL20p  Blade  Servers,  powered  by  Intel®  Xeon™  processors,  and  get  the 
power  to  make  network  management  simple  and  affordable.  You'll  save  on  deployment  time  too,  thanks  to  this  ready-to-go  package. 
Sure,  modular  design  leaves  room  to  expand  later,  but  HP  Blade  Servers  can  also  make  a  big  impact  on  your  total  cost  of  ownership  in  the 
meantime.  Our  management  software  boosts  productivity  and  cuts  reconfiguration  efforts  from  days  to  minutes.  And  because  your  time 
is  money,  the  BL20p  features  fully  redundant  technologies  to  reduce  costly  downtime.  While  our  #1  ranking  in  lntel®-based,  server-customer 
satisfaction  is  one  reason  we  recently  became  the  first  to  sell  over  1 00,000  blade  servers,  there's  more  than  one  reason.  You  also  get  the 
advice  and  support  of  HP  and  our  local  partners  — well  before  and  long  after  you  buy.  Even  when  you  buy  at  more  than  30%  off. 


Save  33% 


Get  the  HP  ProLiant  Bl20p  bundle, 
and  you'll  save  big  compared  to 
the  cost  of  buying  the  two  servers 
and  accessories  separately. 


HP  PROLIANT  BL20p  BLADE 
SERVER  BUNDLE 

d* *  Lease  for  as  low  as 

/  /  $375  a  month’ 

•  (2)  BL20p  Blade  Servers 
Each  Blade  Server  includes: 

-  (2)  Intel1'  Xeon™  processors  3.06GHz-512k 

-  (3)  10/100/1000  NICs  +  (1)  10/100  iLO  NIC 

-  1GB  DDR  memory2 

•  p-Class  blade  enclosure 

•  p-Class  single  phase  power  enclosure 
with  2  power  supplies 

•  Mini  bus  bar  kit 

•  (8)  Rapid  Deployment  Pack  licenses 


■ 


invent 


Download  information  about  HP  Blade  servers. 

Read  a  white  paper  highlighting  total  cost  of  ownership  and  the  Factiva  and 
iSource  case  studies  demonstrating  ROI. 

CALL 

1-877-726-8116 

CLICK 

hp.com/go/blades4 

VISIT 

your  local  HP  reseller 

Otter  available  when  bought  direct  from  HP  or  from  participating  authorized  resellers.  Prices  shown  are  HP  direct  prices:  reseller  and  retailer  prices  may  vary.  Prices  shown  are  subject  to  change  and  do  not  include  applicable  state  and  local  sales  taxes  or  shipping  to  recipient’s 
destination.  HP  is  not  liable  tor  editorial,  pictorial  or  typographical  errors  in  this  advertisement.  Photography  may  not  accurately  represent  exact  configurations  priced.  Otters  cannot  be  combined  with  any  other  offer  or  discount  and  are  good  while  supplies  last.  Limited  order  quantities 
Prometions  void  where  prohibited  or  restricted  by  law.  'Implicit  lease  rate,  assuming  lessee  does  not  exercise  a  fair-market-value  purchase  option  at  the  end  of  the  lease  term  and  timely  returns  the  leased  equipment  to  Hewlett-Packard  Financial  Services  Corporation  (HPFSC)  at 
the  end  of  the  lease  term  and  disregarding  any  charges  payable  by  lessee  other  than  rent  payments  (such  as  taxes,  fees  and  shipping  charges).  Lease  products  available  through  HPFSC  to  qualified  commercial  customers  in  the  U  S.  and  subject  to  credit  approval  and  execution  of 
standard  HPFSC  documentation.  Other  restrictions  may  apply.  HPFSC  reserves  the  right  to  change  or  cancel  this  program  at  any  time  without  notice.  For  more  information,  call  1  -888-277-5942.  'For  hard  drives.  G8=billion  bytes.  Certain  warranty  restrictions  and  exclusions  may  apply 
For  complete  warranty  details,  call  1  -800-345-1 51 8  (U.S.).  Intel,  Intel  Inside,  the  Intel  Inside  Logo  and  Intel  Xeon  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  ©2004  Hewlett-Packard  Development  Company,  L  P 
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SAP  Warns  Users 
About  Phony  Calls 

SAP  AG  warned  users  of  its  appli¬ 
cations  not  to  provide  confidential 
IT  information  to  people  who  call 
them  claiming  to  work  for  its 
technical  support  group.  An  SAP 
spokesman  said  several  cus¬ 
tomers  have  received  calls  seek¬ 
ing  data  such  as  system  access 
codes,  on  the  premise  that  the  in¬ 
formation  was  needed  to  correct 
IT  problems.  He  said  SAP  has  lit¬ 
tle  information  about  the  callers. 


IBM  Asks  Judge  to 
Dismiss  SCO  Claim 

IBM  asked  a  U.S.  District  Court 
judge  in  Utah  to  dismiss  breach- 
of-contract  charges  that  The  SCO 
Group  Inc.  made  in  the  Linux- 
related  lawsuit  it  filed  against 
IBM  last  year.  Lindon,  Utah-based 
SCO,  which  claims  that  IBM 
breached  a  Unix  System  V  licens¬ 
ing  deal,  didn’t  return  calls  seek¬ 
ing  comment.  In  May,  IBM  asked 
the  judge  to  dismiss  a  claim  that 
it  had  violated  Unix  copyrights 
held  by  SCO;  a  decision  on  that 
request  is  still  pending. 


Gartner  Lowers 
PC  Sales  Forecast 

Gartner  Inc.  reduced  its  world¬ 
wide  PC  shipment  forecast  for 
this  year,  saying  that  the  market 
won’t  grow  as  much  as  it  had  pre¬ 
dicted  because  of  continuing  eco¬ 
nomic  concerns  in  the  U.S.  and 
other  regions.  Gartner  now  ex¬ 
pects  shipments  to  increase 
12.6%  yeai  over  year,  down  from 
its  previous  projection  of  13.4% 
growth.  Rival  market  research 
firm  IDC  said  it’s  still  forecasting 
13.5%  growth  in  PC  shipments. 


Short  Takes 

IBM  said  it  has  agreed  to  buy  two 
Danish  IT  services  firms  as  part 
of  a  series  of  deals  that  includes 
a  10-year  IT  outsourcing  contract 
with  Oanske  Bank  AS  in  Copen¬ 
hagen.  ...  Nr  CAPE  COMMUNI¬ 
CATIONS  COPf  released  Version 
7.2  of  its  Web  browser. 


Attorney  Says  Sloppy  IT 
Deals  All  Too  Common 

Final  contracts  often  don’t  include 
‘guarantees’  made  during  sales  pitches 


BY  THOMAS  HOFFMAN 

NEW  YORK 

ost  IT  contracts 
“are  atrocious, 
poorly  written 
and  short  on  de¬ 
tails,”  according  to  attorney 
Mark  Grossman.  In  short,  he 
said  at  a  conference  here  last 
week,  “they’re  a  breeding 
ground  for  litigation.” 

The  breakdown  in  writing 
effective  contracts  is  largely 
the  fault  of  technology  buyers, 
said  Grossman,  chairman  of 
the  technology  law  group  at 
Becker  &  Poliakoff  PA  in  Coral 
Gables,  Fla.  He  added  that  IT 
and  contract  managers  often 
fail  to  apply  critical  negotia¬ 
tion  techniques,  such  as  en¬ 
suring  that  system  perfor¬ 
mance  promises  made  by  ven¬ 
dors  in  response  to  requests 
for  proposals  (RFP)  are  in¬ 
cluded  in  Final  agreements. 

Grossman  led  several  ses¬ 
sions  on  the  legal  aspects  of 
IT  contracts  at  the  conference, 
which  was  held  by  Share  Inc., 
a  Chicago-based  user  group 


whose  membership  is  primari¬ 
ly  drawn  from  IBM’s  main¬ 
frame  customer  base. 

Part  of  the  problem  is  that 
vendors’  responses  to  RFPs 
are  usually  drafted  by  their 
sales  forces  to  help  clinch 
deals  with  users,  Grossman 
said.  Performance  and  support 
guarantees  offered  during  the 
RFP  process  are  often  omitted 
from  contracts  written  by  the 
legal  staffers  of  vendors,  he 
noted. 

Vendor  Advantage 

It’s  a  common  occurrence, 
agreed  several  IT  managers. 

“We  do  it  all  the  time,”  said 
Earl  Johnson,  an  application 
programming  manager  for  the 
city  of  Dallas,  referring  to  the 
failure  to  fully  incorporate 
RFP  terms  into  contracts.  The 
main  reason  that  happens,  he 
said,  “is  the  need  for  expedi¬ 
ency  and  to  maintain  good  re¬ 
lations  with  the  vendor.” 

Software  licensing  man¬ 
agers  and  other  technology 
buyers  usually  are  less  pre¬ 


pared  for  negotiations  than 
vendors  are,  said  William  Sny¬ 
der,  an  analyst  at  Meta  Group 
Inc.  “If  you’re  in  negotiations 
with  a  software  vendor,  in  75% 
of  the  cases,  they  know  more 
about  your  company  than  you 
do,”  Snyder  said. 

Grossman  said  it  doesn’t 

What  You 
Should  Do 

Conference  speakers  and 
attendees  offered  the  following 
negotiating  tips: 

■  Align  the  finalization  of 
contracts  with  the  end  of  ven¬ 
dors’  fiscal  quarters  to  get  the 
best  deals  possible. 

■  Include  provisions  for  accep¬ 
tance  testing  to  ensure  that 
products  meet  performance  and 
functionality  expectations. 

■  Make  sure  that  software 
doesn’t  contain  intellectual 
property  that's  owned  by  another 
vendor  and  isn’t  licensed. 


■  Put  in  writing  that  source 
code  must  be  accessible  to  your 
company  through  a  source-code 
escrow  firm. 


help  that  most  companies 
begin  negotiations  at  an  im¬ 
mediate  disadvantage  because 
contract  drafts  are  typically 
crafted  by  vendors,  unless  the 
customer  is  a  Fortune  100 
company  with  considerable 
purchasing  clout. 

“We’ve  taken  a  different  ap¬ 
proach,”  said  an  IT  manager 
at  a  major  auto  manufacturer 
who  requested  anonymity. 

Last  year,  his  company  hired 
Gartner  Inc.  to  create  a  master 
service-agreement  template 
that  it  has  begun  using  in  ne¬ 
gotiations  with  a  group  of  four 
offshore  application  develop¬ 
ment  vendors. 

“Historically,  our  15  applica¬ 
tion  development  managers 
each  had  the  authority  to  ne¬ 
gotiate  such  deals  on  their 
own,”  the  IT  manager  said. 
The  master  service  agreement 
“should  give  us  more  unanimi¬ 
ty  on  contracts,”  he  added. 

But  the  new  approach  hasn’t 
been  a  silver  bullet,  the  IT 
manager  cautioned.  Since  the 
offshore  vendors  returned  the 
contract  proposals  with  sug¬ 
gested  changes  five  months 
ago,  little  progress  has  been 
made  toward  finalizing  the 
agreements. 

“The  IT  department  is 
ready  to  go,”  he  said,  but  he 
added  that  a  busy  workload 
for  the  company’s  contracts 
and  legal  team  is  “holding  up 
the  whole  process.”  O  48923 


Microsoft  Tries  to  Cozy  Up  to  Mainframe,  iSeries  Users 


At  the  Share  conference  last 
week,  Microsoft  Corp.  an¬ 
nounced  an  upgrade  of  its  Host 
Integration  Server  software  that’s 
designed  to  make  it  easier  for 
users  to  link  Windows  systems 
with  IBM’s  mainframes  and  iS¬ 
eries  midrange  servers. 

Host  Integration  Server  2004 
includes  new  Transaction  Inte¬ 
grator  development  tools  that  are 
integrated  with  Microsoft’s  .Net 
Framework  and  Visual  Studio 
.Net  technologies.  The  tools  can 
be  used  to  turn  mainframe  and 
iSeries  applications  into  XML- 
based  Web  services,  said  lead 
product  manager  Steven  Martin. 

The  upgrade,  Microsoft’s  first 


in  four  years,  is  due  Sept.  1  and 
will  be  available  in  both  standard 
and  enterprise  editions.  Pricing  is 
$2,499  per  processor  for  the 
standard  edition  and  $9,999  per 
CPU  for  the  enterprise  package, 
which  includes  full  support  for 
Transaction  Integrator  plus  a 
bridge  between  Microsoft’s 
message-queuing  software  and 
IBM’s  WebSphere  MQ  product. 

Martin  said  about  30  users 
took  part  in  a  “high-touch’’  test¬ 
ing  program  while  others  tested 
beta  versions  of  the  upgrade. 

One  of  the  high-touch  users 
was  Tom  Taglianetti,  a  platform 
architect  at  Fiserv  LeMans,  a 
King  of  Prussia,  Pa.-based  unit  of 


Fiserv  Inc.  that  sells  software  for 
the  automobile  financing  indus¬ 
try.  “Our  interest  in  the  product  is 
primarily  for  its  application  inte¬ 
gration  capabilities  with  CICS 
technology,”  he  said,  referring  to 
one  of  IBM’s  transaction  man¬ 
agement  systems. 

Mainframe  Data  on  PCs 

Total  System  Services  Inc. 
(TSVS),  which  provides  electron¬ 
ic  payment  processing  services, 
uses  Host  Integration  Server  to 
provide  up  to  4,000  employees 
with  access  to  mainframe  data 
on  their  Windows  PCs.  Tim  Kelly, 
director  of  distributed  technolo¬ 
gies  at  TSVS,  said  the  .Net  inte¬ 


gration  capabilities  built  into  the 
new  release  let  the  Columbus, 
Ga.-based  company  “spoof  our 
apps  into  thinking  mainframe- 
based  data  is  native." 

Host  Integration  Server  has 
been  a  sleeper  in  Microsoft’s 
product  line  but  is  becoming 
more  interesting  with  the  up¬ 
grade,  said  Peter  O’Kelly,  an  ana¬ 
lyst  at  Burton  Group  in  Midvale, 
Utah.  “The  additional  features 
may  not  be  glamorous,  but 
they’re  important,"  he  said. 

O’Kelly  added  that  he  expects 
“very  healthy  competition"  be¬ 
tween  Microsoft  and  IBM,  which 
offers  similar  functionality  in  its 
WebSphere  product  line. 

-  Laura  Rohde. 
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PeopleSoft 

dor,  and  our  business  depends 
on  them,  but  there  is  still  a  lot 
of  evolution  for  the  merged  or¬ 
ganization  that  has  to  go  on.” 

Pond  is  director  of  informa¬ 
tion  services  at  Schnitzer  Steel 
Industries  Inc.  in  Portland, 
Ore.,  and  the  new  president  of 
Quest  International  Users 
Group,  an  independent  orga¬ 
nization  for  J.D.  Edwards  cus¬ 
tomers.  He  said  the  customer 
support  and  software  develop¬ 
ment  operations  for  the  appli¬ 
cations  he  uses  are  running  at 
about  the  same  levels  as  they 
did  under  J.D.  Edwards. 

However,  like  some  other 
users,  Pond  has  had  to  change 
sales  representatives  and  has 
raised  concerns  about  People- 
Soft’s  software  licensing  poli¬ 
cies  [QuickLink  47778]. 

Differences  in  corporate 
culture  have  also  affected  user 
perceptions  about  PeopleSoft, 
according  to  Pond.  “J.D.  Ed¬ 
wards  was  very  relationship- 
oriented  —  almost  to  a  fault,” 
Pond  said,  adding  that  he 
thinks  PeopleSoft  is  more 
sales-oriented. 

“The  warm,  fuzzy  feeling  is 
gone,”  said  Mari  Jo  Moody, 
manager  of  customer  support 
at  Batesville  Casket  Co.  in 
Batesville,  Ind.  She  added  that 
her  company  has  lost  some  of 
the  prominence  it  had  with 
J.D.  Edwards,  which  catered  to 
midsize  users  such  as  Bates¬ 
ville  Casket.  “We  used  to  have 
a  close  connection  with  J.D. 
Edwards,  but  now  we’re  no 
longer  the  big  fish  in  the 
pond,”  Moody  said. 

Despite  such  comments, 
PeopleSoft  sees  the  acquisition 
as  a  big  success,  said  Ram  Gup¬ 
ta,  the  vendor’s  vice  president 
of  products  and  technology 
and  its  point  man  on  the  inte¬ 
gration  of  the  two  companies. 

“My  experience  in  16  acqui¬ 
sitions  tells  me  that  in  12 
months,  this  acquisition  has 
gone  absolutely  pretty  much 
as  planned  or  better,”  Gupta 
said.  “We’ve  added  more  prod¬ 
ucts,  increased  the  research 
and  development,  and  are  get¬ 
ting  cultural  benefits  from  the 
companies’  similarity,  and 


Users  Have  More  Choices,  Better 
Support,  PeopleSoft  Exec  Says 


As  vice  president  of  products 
and  technology  at  PeopleSoft, 
Ram  Gupta  has  worked  very 
closely  on  the  integration  of  its 
applications  and  the 
software  developed  by 
J.D.  Edwards.  He  spoke 
with  Computerworld 
this  month  about  the 
merger  of  J.D.  Edwards 
into  PeopleSoft. 

Do  you  view  the  merg¬ 
er  as  a  success?  The 

customer  has  more 
choice  [now].  On  the  product 
side,  we  increased  research  and 
development  in  the  World  line  by 
10%.  In  the  second  quarter,  we 
got  done  shipping  the  latest  re¬ 
lease  of  the  EnterpriseOne  fami¬ 
ly  with  16  new  products  and  250 
enhancements.  In  the  last  12 


months,  we  added  more  prod¬ 
ucts  to  EnterpriseOne  than  was 
done  in  the  two  years  before  the 
merger.  We  took  the  Total  Own¬ 
ership  Experience  initia¬ 
tive  going  on  in  the  Peo¬ 
pleSoft  side  of  the  house, 
and  that’s  available  to 
J.D.  Edwards  customers 
in  terms  of  better  sup- 
portability  and  a  higher 
quality  of  code. 

On  the  support  side 
before,  a  large  number  of 
J.D.  Edwards  customers 
were  on  a  five-day-by-eight- 
hours  support  model  for  their 
maintenance.  The  J.D.  Edwards 
users  got  migrated  upward  to  a 
seven-day-by-24-hour  model. 

For  the  financial  dimension, 
we  paid  $1.8  billion  and  still  put 
$89  million  in  the  bank  [in  the 


second  quarter],  and  we’re 
clearly  the  No.  2  applications 
provider  after  SAP. 

Some  J.D.  Edwards  cus¬ 
tomers  complain  that  they’re 
being  forced  to  migrate  to 
PeopleSoft’s  licensing  scheme 
or  face  pricing  penalties.  Is 
that  true?  You  can  have  a  value- 
based  or  user-based  license.  We 
didn’t  force  customers  to  choose 
any  model.  That's  not  the  objec¬ 
tive,  and  that’s  an  absolutely 
documented  policy. 

Another  user  complaint  is  that 
PeopleSoft  is  a  more  aggres¬ 
sive  company  than  J.D.  Ed¬ 
wards  was.  I  think  that’s  an 
interesting  observation,  unfortu¬ 
nately,  that  leads  some  to  decide 
that  PeopleSoft  is  a  sales  and 


marketing  machine,  when  we 
spend  a  higher  amount  of  re¬ 
search  and  development  dollars 
as  a  percentage  of  total  revenue 
than  Oracle  or  SAP,  or  J.D.  Ed¬ 
wards  did  for  that  matter. 

PeopleSoft  is  a  more  busi¬ 
nesslike  and  professionally  run 
company.  Our  customer  profile 
was  kind  of  bigger,  and  they 
needed  a  different  kind  of  atten¬ 
tion  when  we  visited  them:  Wall 
Street  or  banking  CIOs  wanted 
people  in  suits  and  ties.  J.D.  Ed¬ 
wards  had  smaller  customers  -  a 
$200  million  manufacturing 
plant  in  Idaho,  for  example. 

PeopleSoft  had  a  bad  quarter. 
Is  Oracle’s  takeover  bid  delay¬ 
ing  purchases?  Yes,  it  does 
make  selling  a  little  more  chal¬ 
lenging,  as  in  the  last  quarter, 
but  look  at  the  numbers:  We 
signed  160  new  customers  in  the 
last  quarter.  I  find  that  outstand¬ 
ing  for  a  sales  organization  in 
such  a  tough  environment. 

-  Marc  L.  Songini 


we’re  adding  better  support.” 

Gupta  acknowledged  that 
PeopleSoft  is  “a  more  busi¬ 
nesslike  company”  than  J.D. 
Edwards  was.  But  he  said  that 
approach  is  necessary  because 
PeopleSoft  has  many  banks 
and  other  large  companies  in 
its  user  base  (see  interview 
above). 

Users  said  one  plus  is  that 
PeopleSoft  has  upheld  its  com¬ 
mitment  to  continue  enhanc¬ 
ing  the  product  lines  devel¬ 
oped  by  J.D.  Edwards,  includ¬ 
ing  its  World  green-screen  ap¬ 
plications.  PeopleSoft  has  re¬ 
leased  new  versions  of  both 
the  World  software  and  the 
more  modern  J.D.  Edwards  5 
applications,  which  are  now 
called  EnterpriseOne. 

“As  a  World  user,  life  is  infi¬ 
nitely  better  under  PeopleSoft 
than  it  was  during  the  last 
days  of  J.D.  Edwards,”  said 
Dave  Hyzy,  director  of  IT  at 
Benderson  Development  Co., 
a  real  estate  developer  in  Buf¬ 
falo,  N.Y.  “World  is  now  a  vi¬ 
able  software  product  again.” 

But  a  huge  rift  has  devel¬ 
oped  between  Quest  and  Peo- 


Postdea! 

Developments 


pleSoft,  which  decided  not  to 
take  part  in  the  Lexington,  Ky.- 
based  user  group’s  confer¬ 
ences  after  talks  between  the 
two  broke  down  late  last  year. 

There  also  is  the  looming  is¬ 
sue  of  Oracle  Corp.’s  hostile 
takeover  bid  for  PeopleSoft, 
which  was  launched  in  appar¬ 
ent  response  to  the  deal  with 
J.D.  Edwards.  PeopleSoft  fell 
short  of  both  its  initial  revenue 
forecast  and  a  subsequent  re¬ 
duced  target  in  this  year’s  sec¬ 
ond  quarter,  a  showing  it 
blamed  primarily  on  publicity 


about  the  U.S.  Department  of 
Justice’s  attempt  to  block  Ora¬ 
cle’s  bid. 

“Without  a  doubt,  the  world 
would  have  been  vastly  differ¬ 
ent  for  PeopleSoft  without  the 
Oracle  [offer],”  said  Josh 
Greenbaum,  an  analyst  at  En¬ 
terprise  Applications  Consult¬ 
ing  in  Berkeley,  Calif.  “Had 
they  been  more  free  to  operate, 
there  would  have  been  much 
more  hand-holding  and  more 
careful  attention  to  the  details 
that  would  have  made  the  J.D. 
Edwards  customers  happy.” 


PeopleSoft  has  shown 
promise  but  remains  on  “pro¬ 
bation,”  said  David  Hilmer,  di¬ 
rector  of  IT  at  GrafTech  Inter¬ 
national  Ltd.  in  Wilmington, 
Del.  Hilmer  will  be  paying 
close  attention  to  PeopleSoft 
at  its  Connect  2004  user  con¬ 
ference  next  month  in  San 
Francisco.  “I’m  still  watching 
to  be  sure  I’m  serviced  and 
supported  as  a  customer  and 
have  the  commitment  from 
this  company  like  I  had  from 
J.D.  Edwards,”  he  said. 

O  48945 


September:  PeopleSoft 
upgrades  J.D.  Edwards’ 
flagship  applications,  now 
called  EnterpriseOne. 


|  April:  Two  of  Quest's 
I  special  interest  groups 
1  defect  to  PeopleSoft’s 
|  user  organizations. 


December: 

■  PeopleSoft  says  it’s  developing  unified  soft¬ 
ware  licensing  and  combining  its  sales  forces. 

■  The  company  releases  links  between  its 
own  applications  and  the  EnterpriseOne  line. 

■■ 


FMAiJ  J  A  S OKDJFMA 

■'ll* 


January:  The  Quest 
user  group  says 
PeopleSoft  has  de¬ 
cided  not  to  sup¬ 
port  its  events. 


March:  People- 
Soft  announces 
an  upgrade  of  J.D. 
Edwards'  green- 
screen  software. 


July:  PeopleSoft 
reports  Q2  revenue 
shortfall,  blames 
fallout  from  Ora¬ 
cle’s  takeover  bid. 
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Checklist  for  Success 


A  CIO  FRIEND  OF  MINE  once  confessed, 
somewhat  sheepishly,  that  he  simply 
can’t  resist  a  good  checklist.  Whenever 
and  wherever  he  comes  across  a  num¬ 
bered  list  of  any  kind  (a  lineup  of  check 
boxes  is  a  particular  thrill),  he  has  to  stop  and  read 
it.  Tips,  tactics,  random  advice  —  almost  any  top  10 
list  is  grist  for  his  mental  mill.  “Most  of  the  time  I 
know  all  the  stuff  on  the  list;  often  it’s  just  common 
sense,”  he  admits.  “But  every  now  and  then  I  find  a 
really  great  idea.” 


I  was  thinking  of  that 
list-hungry  CIO  as  I 
looked  over  our  “IT  Sur¬ 
vival  Guide”  (page  30, 
and  online  at  QuickLink 
48479).  It’s  not  a  compli¬ 
cated  or  daunting  list  by 
any  means,  coming  as  it 
does  from  that  cheerful 
guy  holding  the  shovel, 

Ace  Hardware  CIO  Paul 
Ingevaldson.  What’s  his 
claim  to  fame?  He  not 
only  lasted  at  Ace  for  25 
years  (“a  long  time  in  this  day  and 
age  of  the  portable  CIO,”  he  notes); 
he  also  logged  four  decades  in  IT. 
Imagine  being  able  to  boil  down  40 
years  of  IT  experience  to  10  core 
pieces  of  advice. 

But  no  matter  how  fine  a  list  it  is, 
you  won’t  remember  10  things.  So 
I’ve  boiled  them  down  further  into 
three  enduring  truths  about  IT  and 
business.  Almost  any  list  you’ll  ever 
encounter  about  IT  management 
could  be  parsed  into  the  following 
mantras: 

1.  Whatever  connects  IT  more  closely  to 
the  business  is  worth  doing.  The  first 
piece  of  advice  Ingevaldson  offers  is 
to  get  out  of  the  IT  department  and 
work  in  a  business  unit,  a  recom¬ 
mendation  I’ve  heard  echoed  by  so 
many  management  consultants  that 
I've  lost  count.  But  coming  from  a 
CIO  (and  one  who’s  rooting  for  you 
to  return  to  IT),  it  carries  substan¬ 
tially  more  weight. 


MARYFRAN  JOHNSON  IS 

editor  in  chief  of  Comput- 
erworld.  You  can  contact 

her  at  maryfranjohnson® 
computerworld.com. 


He  also  stresses  the  im¬ 
portance  of  grasping  the 
corporate  business  strate¬ 
gy  and  then  mobilizing  IT 
to  support  it.  Not  just  im¬ 
plementing  a  strategy,  he 
warns,  but  getting  IT  in¬ 
volved  as  part  of  the  proc¬ 
ess.  And  to  all  those  com¬ 
panies  trying  to  charge 
out  IT  as  a  business-unit 
expense,  this  veteran  CIO 
says  to  cut  it  out.  “Oper¬ 
ate  it  as  an  expense  cen¬ 
ter,”  he  recommends,  explaining  that 
if  top  business  execs  are  part  of  the 
prioritizing  process,  they’ll  know 
that  IT  is  “working  on  the  important 


applications.”  Operating  IT  as  a  utili¬ 
ty  means  it  will  never  be  strategic. 

2.  Whatever  improves  communication 
about  IT  is  worth  repeating.  (Read  that 
again.)  This  is  one  of  the  toughest 
sells  to  introverted  IT  folks  because 
it  entails  talking  up  (a.k.a.,  market¬ 
ing)  the  value  of  IT  to  end  users. 

And  that  means  actually  speaking  to 
those  people.  “Don’t  keep  IT  in  the 
closet,”  Ingevaldson  says.  “Spread 
the  word,  create  excitement  and  con¬ 
vince  people  to  get  on  the  IT  band¬ 
wagon.”  (There’s  got  to  be  at  least 
one  extrovert  in  your  IT  department, 
right?  Put  her  to  work.) 

3.  Whatever  encourages  good  IT  man¬ 
agement  practices  is  worth  trying.  Using  a 
hands-off  management  style  with 
smart,  motivated  staffers  (“Get  out  of 
their  way”)  is  another  of  Ingevald- 
son’s  tips,  alongside  classics  like 
learning  to  delegate  and  setting  high 
expectations  for  meeting  project 
dates  and  budgets.  “Missed  deadlines 
and  busted  budgets  are  the  things 
that  give  IT  a  bad  name,”  he  notes. 

Of  course,  after  40  years  of  dealing 
with  end  users,  this  CIO  knows  there 
will  be  simply  god-awful  days  when 
none  of  his  management  mantras 
will  help.  That’s  when  he  gets  really 
sensible:  “Tough  days  are  why  they 
invented  single  malts.”  O  48927 


VIRGINIA  ROBBINS 

Not  AH 
Employers 
Play  Fair 

RECENTLY,  my  extend¬ 
ed  family  joined  me 
for  an  all-too-brief 
summer  get-together  in  San 
Francisco.  On  one  particularly 
foggy  day,  Samantha,  my  12- 

year-old  niece,  turned  to  her  20-year- 
old  cousin,  Matthew,  and  announced 
that  while  they  were  waiting  for  lunch 
they  would  play  keep-away.  Speaking 
with  a  great  deal  of  authority,  Saman¬ 
tha  announced  the  rules  that  would 
make  the  game  fair.  Six-foot-three 
Matthew  would  need  to  sit  on  the  car¬ 
pet  in  the  middle  of  the  room,  while 
she  would  go  to  the  other  end  of  the 
room  and  kneel.  Kathryn,  age  6,  would 
stand  by  the  door  with  plenty  of  room 
to  throw,  and  Ashley, 

4,  would  sit  in  the 
big  chair  by  the  door 
and  catch.  Matthew, 
having  met  his  equal 
in  the  world  of  keep- 
away,  agreed.  Saman¬ 
tha  began  by  tossing 
the  green  Nerf  ball 
over  Matthew’s  head 
to  her  sisters,  and 
the  girls  managed  to 
keep  the  ball  away 
from  him  until  the 
PB&J  and  chocolate 
milk  were  ready. 

As  I  prepared  the  sandwiches  in  the 
next  room,  I  couldn’t  help  but  think 
about  Samantha’s  view  of  fairness.  The 
game  was  clearly  equalized,  with  tall, 
skinny  Matthew,  seat  plastered  to  the 
carpet,  straining  to  reach  the  ball.  I  was 
impressed  with  Samantha’s  ability  to 
command  a  room  and  keep  the  game 
fun  for  her  little  sisters.  And  I  had  to 
smile,  since  as  an  adult  I  know  that  life 
isn’t  fair,  no  matter  how  well  we  com¬ 
mand  the  room. 

When  it  comes  to  outsourcing, 
whether  that  involves  shipping  work 
elsewhere  in  the  U.S.  or  overseas,  the 
employers  that  we  choose  to  work  for 
don’t  always  seem  to  play  fair.  Of 
course,  what’s  fair  to  you  may  not  be 
fair  to  me,  so  to  illustrate  what  I  think 
is  fair,  I  will  use  words  that  rely  on  a 
time-based  viewpoint.  I  will  define  fair 


VIRGINIA  ROBBINS  is  CIO 

and  managing  director 
at  Chela  Education 
Financing  in  San  Fran¬ 
cisco.  Contact  her  at 

v.m.robbins@yahoo.com. 


www.computerworld.com 


OPINION 


COMPUTERWORLD  August  23. 2004  15 


as  a  balanced,  long-term  perspective, 
and  unfair  as  a  short-term,  less-bal¬ 
anced  perspective. 

Short-term  companies  are  those  that 
focus  on  how  much  money  can  be 
made  as  soon  as  possible.  In  the  most 
extreme  cases,  short-term  companies 
are  only  about  today’s  cash  position. 
For  these  companies,  outsourcing,  es¬ 
pecially  overseas  outsourcing,  isn’t  an 
investment  —  it’s  a  way  to  cut  costs  to¬ 
day.  For  employees  working  in  these 
companies,  it’s  sometimes  frightening¬ 
ly  obvious  that  domestic  workers  are 
an  undesired  expense. 

Other  companies  have  a  long-term 
perspective  and  see  costs,  including 
employee  costs,  as  an  investment. 
These  companies  may  still  choose  to 
outsource,  but  if  they  do,  they’ll  struc¬ 
ture  the  work  and  the  agreements  to 
reflect  a  long-term  strategy,  developing 
disciplined  processes  over  time  that 
change  in  response  to  their  experi¬ 
ences.  If  you’ve  worked  only  in  short¬ 
term  companies  and  are  curious  as  to 
what  attributes  a  long-term  company 
displays,  read  Jim  Collins’  books  Good 
to  Great  and  Built  to  Last. 

Some  believe  that  short-term  think¬ 
ing  is  what  capitalism  is  all  about.  As 
an  economist,  I  don’t  agree.  A  free 
market  allows  companies  to  look  to  the 
short  term  and  to  profit  or  not  accord¬ 
ingly.  It  also  allows  those  that  look  to 
the  long  term  to  profit  or  not  as  well. 
It’s  fabulous  that  we  live  in  a  country 
that  allows  companies  and  employees 
to  choose,  and  then  to  act  accordingly. 
Life  isn’t  fair,  but  that  doesn’t  mean 
you  need  to  work  for  someone  focused 
only  on  the  short  term.  ©  48832 

DAVID  MOSCHELLA 

Keeping  Up 
With  Your  IT 
Consumers 

DO  THE  EMPLOYEES 
in  your  organization 
ever  complain  that  they 
have  better  technology  at 
home  than  in  the  office?  Do 

you  require  them  to  access 
corporate  systems  via  a  dedicated  PC 
as  opposed  to  any  Internet-connected 
browser?  Do  they  ever  use  their  per¬ 
sonal  Internet  e-mail  accounts  for 
business  and  laugh  at  the  limitations  of 
Microsoft  Exchange  or  Lotus  Notes? 

Do  they  sometimes  shake  their  heads 


wondering  why,  if  they  can 
set  up  a  wireless  LAN  at 
home  in  a  few  hours,  corpo¬ 
rate  IT  says  wireless  sys¬ 
tems  in  the  office  are  too 
complex  and  risky? 

While  IT  professionals 
can  often  give  perfectly 
valid  answers  to  these  and 
similar  questions,  you  know 
before  you  give  them  that 
they  will  mostly  fall  on  deaf 
ears.  The  reality  is  that  em¬ 
ployee  expectations  of  IT 
are  now  being  shaped  out¬ 
side  of  the  workplace.  It’s  all 
part  of  the  increasing  con- 
sumerization  of  corporate  IT. 

Consumerization  is  happening  in 
two  main  ways.  First,  many  employees 
are  now  active  consumers  of  IT. 
They’re  becoming  increasingly  famil¬ 
iar  with  broadband,  multimedia  appli¬ 
cations,  wireless  systems,  digital  cam¬ 
eras,  smart  phones  and  browser-based 
computing.  They’re  also  becoming 
increasingly  intolerant  of  workplaces 
that  still  treat  them  as  passive  users. 
Moreover,  the  laptops  and  mobile 
phones  they  carry  are  almost  always 
dual-purpose  devices  used  extensively 
for  both  business  and  personal  appli¬ 
cations. 

The  ramifications  of  this  are  now 
becoming  clear.  IT  departments  have 


become  accustomed  to 
treating  employees  like 
children  who  must  be  told 
what  they  can  and  cannot 
do.  But  many  employees 
want  to  be  treated  like  con¬ 
sumers,  given  choice  and 
flexibility  in  their  use  of  IT. 
If  they  are  going  to  work  at 
home  and  lug  around  dual- 
use  work/personal  devices, 
these  devices  will  have  to 
meet  their  personal  stan¬ 
dards,  not  just  for  func¬ 
tionality  but  increasingly 
for  style  and  fashion  as 
well.  Requiring  every  em¬ 
ployee  to  accept  the  same  generic  IT 
capabilities  will  become  almost  as  ab¬ 
surd  as  requiring  that  every  employee 
drive  the  same  car. 

The  second  aspect  of  consumeriza¬ 
tion  will  in  the  long  run  prove  even 
more  important  and  disruptive.  In¬ 
creasingly,  the  public  infrastructures 
that  are  emerging  to  support  con¬ 
sumers  will  be  fundamentally  better 
than  the  private  infrastructures  that 
companies  have  traditionally  built  for 
themselves. 

Just  look  at  the  price/performance  of 
today’s  consumer-oriented  Wi-Fi, 
videoconferencing,  storage,  messaging, 
Internet  telephony  and  broadband  ser¬ 
vices.  While  Google’s  advertising- 
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based  plan  to  give  consumers  a  free 
gigabyte  of  e-mail  storage  won’t  be 
for  everyone,  it  is  certainly  indicative 
of  the  enormous  service  improvements 
to  come. 

Similarly,  while  large  enterprises 
have  generally  looked  askance  at  the 
idea  of  utility  computing,  the  reality  is 
that  this  is  the  way  most  of  the  market 
already  works.  Consumers  and  many 
small  businesses  already  buy  their  net¬ 
working,  storage,  hosting  and  telepho¬ 
ny  capacity  by  the  month,  based  on 
what  sort  of  service  requirements  they 
expect  to  have.  They  don’t  build  infra¬ 
structure;  they  simply  use  it. 

Therefore,  the  big  question  is 
whether  large  organizations  will  con¬ 
tinue  to  have  their  own  unique  style  of 
computing,  with  a  heavy  emphasis  on 
their  own  private  infrastructures  and 
the  rules  needed  to  support  them,  or 
whether  at  some  point  consumer  and 
business  computing  will  effectively 
merge,  with  everyone  increasingly 
sharing  a  common  public  infrastruc¬ 
ture.  That’s  the  long-term  promise  of 
consumerization,  and  although  it’s  still 
a  long  way  off,  that’s  the  direction  the 
market  is  moving  in.  ©  48846 
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Doomed  Projects 
Are  Nothing  New 

YAWN!  Another  IT  project  de¬ 
layed  or  doomed  [“Australian 
Firm  Wrestles  With  ERP  Delays, 
S11.5M  Overrun,"  QuickLink  48068], 
“Dog  bites  man"  would  be  a  more 
newsworthy  story.  If  there  were 
fraud  or  other  malfeasance,  there 
might  be  some  reason  to  run  a  small 
piece  on  this.  But  if  this  is  just  anoth¬ 
er  level-zero  customer  dealing  with  a 
level-zero  contractor  bumbling  along 
and  hoping  to  eventually  hack  to¬ 
gether  some  software  system,  why 
bother  killing  a  tree  for  it?  What  the 
readers  of  Computerworld should  be 
told  is  the  root  cause  of  this  problem. 

In  the  same  issue,  the  story  “IT 
Governance  Is  on  the  Hot  Seat” 
[QuickLink  48025]  echoes  the 
same  problem.  Portfolio  manage¬ 
ment  is  routine  in  well-run  compa¬ 
nies.  It  is  just  an  extension  of  proj¬ 
ect/program  management,  and  un¬ 
less  the  company  is  exceptionally 
large,  there  should  be  no  need  for  a 


separate  committee.  In  a  truly  large 
company,  an  integrated  product 
team,  or  IPT,  as  these  committees 
are  commonly  called,  would  be  a 
routine  part  of  normal  decision 
processes.  Such  teams  consider 
not  only  the  cost  and  value  added 
but  also  the  impacts  on  other  areas. 
They  consider  constraints  such  as 
budgets  and  delays  to  other  proj¬ 
ects  if  shared  resources  are  divert¬ 
ed.  In  short,  they  make  decisions 
that  will  optimize  the  enterprise 
within  the  real-world  constraints  of 
time  and  budget. 

William  Adams 
Consultant,  Springfield,  Va. 


Waiting  for  What’s 
Next  in  E-mail 

Mark  hall’s  column  “The 
End  of  E-mail”  [QuickLink 
47526]  was  intelligent,  factual, 
readable  and  made  complete  sense. 
Hall  will  be  attacked  by  the  techies, 
but  they're  no  different  from  the 
people  who  said  that  the  Pony 


Express  was  the  greatest  com¬ 
munication  tool  that  would  ever  be 
developed. 

Andrew  H.  Olson 
Managing  director, 

TEAM  International  Group, 
Gainesville,  Fla. 

I  KEPT  WAITING  for  the  punch  line 
in  Mark  Hall’s  column,  but  I  was 
left  high  and  dry.  What  is  going  to 
replace  e-mail?  Of  course  messag¬ 
ing  will  evolve,  as  it  has  from  news- 
groups  to  e-mail.  But  I  disagree  that 
it  will  evolve  because  of  spam  and 
viruses.  It  will  evolve  because  a  new 
alternative  will  be  easier,  more  reli¬ 
able  and  more  flexible. 

It's  true  that  handhelds  don’t 
have  the  problems  commonplace  in 
e-mail,  but  those  problems  arose 
only  when  usage  levels  made  it 
worthwhile  for  spammers.  When 
handhelds  catch  up,  you  can  be 
sure  that  the  spam  marketers  and 
virus  aficionados  will  reset  their 
sights  on  that  next-generation  mass 
platform.  That  is  also  a  natural  evo¬ 


lution.  For  handhelds  (or  whatever 
the  next  generation  is)  to  catch  up, 
their  architectures  will  have  to  be¬ 
come  more  open  to  enable  third- 
party  development  to  provide  appli¬ 
cations,  data/information  and  other 
integration,  and  those  are  the  same 
tools  that  enable  spammers  and 
hackers  to  thrive.  And  then  the  cycle 
will  begin  again! 

Dan  Leichtenschiag 
CTO,  Diets.com, 

Deerfield  Beach,  Fla. 

COMPUTERWORLD  welcomes 
comments  from  its  readers.  Letters 
will  be  edited  for  brevity  and  clarity. 
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Fax:(508)879-4843. 
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ber  for  immediate  verification. 
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Visual  Studio.NET  2003  significantly 
reduces  the  amount  of  code  you 
need  to  write,  freeing  you  up  to 
think  big  thoughts. 

Think  big.  Visual  Studio'  .NET  2003 
delivers  higher  productivity  by  taking 
care  of  the  small  stuff,  so  you  can 
concentrate  on  bigger  things.  Just  ask 
HP.  "On  our  consumer  application 
project  Visual  Studio  .NET  really  lowered 
the  technical  barriers  to  doing  great 
work,"  says  an  HP  Technical  Lead.  "We 
developed  the  application  faster  than 
we  could  have  with  other  technologies 
due  to  the  better  tool  set  capabilities." 
To  find  out  how  Visual  Studio  .NET  2003 
can  help  you  concentrate  on  big  ideas, 
visit  msdn.microsoft.com/visual/think 


Visual  Studio 


Es  Grid  Computing  Ready 
for  Your  Enterprise? 

Computerworld’s  IT  Executive  Summit  Will  Guide  Your  Decision 


If  you’re  an  IT  executive*  in  an  end-user  organization, 
apply  to  attend  Computerworld's  upcoming  complimentary 
half-day  summit  on  Grid  Computing. 

When  done  well,  grid  computing  can  lower  hardware 
costs,  reduce  development  and  operational  expenses 
and  result  in  more  effective  systems  management 
and  use  of  processing  resources.  As  grid  moves  from 
the  realm  of  science  and  research  into  business 
applications,  what  are  the  risks,  tradeoffs,  and  key 
considerations?  How  have  other  businesses  evaluated 
the  opportunities  to  use  grid?  Most  importantly, 
is  this  emerging  style  of  computing  finally  ready 
for  your  enterprise? 

By  leveraging  the  knowledge  of  industry  experts  and 
the  real-world  experience  and  advice  of  your  IT  peers, 
this  IT  Executive  Summit  will  provide  an  overview  of 
effective  strategies  for  assessing  and  implementing 
grid  technologies. 

*  Complimentary  registration  is  restricted  to 
qualified  IT  executives  only. 


Apply  for  registration  today 

For  more  information  or  to  apply,  visit 

www.itexecutivesummit.com 


Grid  Computing:  Assessing  the 
Reality  and  the  Potential 
Philadelphia  •  September  15,  2004 

Philadelphia  Marriott  -  1201  Market  Street  -  Independence  Ballroom 

7:45am  to  8:15am  Registration  and  Networking  Breakfast 

8:15am  to  8  45am  From  Cutting  Edge  to  Corporate  Stage: 

Grid  Computing  and  the  Enterprise 

Maryfran  Johnson,  Editor  in  Chief,  Computerworld 

8:45am  to  9: 1 5am  Industry  Analyst  Perspective 

9:15am  to  9:45am  Virtualization  at  CIGNA  Corp.:  Balancing 

Tactical  IT  Goals  with  Business  Strategy 

Ben  Flock,  VP  of  Virtualization  and  Application  Frameworks,  CIGNA 
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9:45am  to  10:15am 
10:15am  to  10:45am 
10:45am  to  1 1:15am 

1 1:15am  to  noon 


Refreshment  and  Networking  Break 

Update  from  the  Enterprise  Grid  Alliance 

The  View  of  Grid  Computing  from  Iron  Mountain 

Bill  Olsen,  VP  of  Engineering,  Iron  Mountain 

Key  Considerations  in  Grid  Computing 
Projects:  An  IT  Executive  Roundtable 

Panel  Moderator:  Patrick  Thibodeau,  Senior  Editor, 
Computerworld 


1 

¥ 


Patrick 
Thibodeau 
Senior  Editor, 
Computerworld 


Noon 


Program  Concludes 
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State  Room  (60  State  Street)  in  Boston 
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FUTURE  WATCH 

Software  Flight  Plan 

Paul  D.  Nielsen,  the  new  CEO  of  Carnegie 
Melon’s  Software  Engineering  Institute,  ex¬ 
plains  how  his  experience  running  a  $3  billion 
military  research  lab  will  help  the  university 
develop  commercial  applications.  Page  24 


OPINION 


SECURITY  MANAGER’S  JOURNAL 


Here’s  to  Your 
(Electronic)  Health 


Antivirus  Service 
Troubled  byTLS 


The  U.S.  Health  and  Human  Services  depart¬ 
ment’s  initiative  to  consolidate  Americans’  elec¬ 
tronic  health  records  is  a  worthy  cause  —  and  a 
daunting  project,  says  Tommy  Peterson.  Page  26 


A  new  antivirus  service  runs  afoul 
of  Roger  Foix’s  all-too-complicated 
Transport  Layer  Security  e-mail 
encryption  configuration.  Page  25 


The  new  802.11i  wireless  LAN  security  standard  is  a  step  forward, 
but  Wi-Fi  LANs  still  aren’t  impervious  to  attacks,  by  joanie  wexler 


i 


Unbounded  by  the  physical  constraints 
of  cabling  and  walls,  wireless  LANs 
have  proved  tricky  to  secure.  Now  that 
the  long-awaited  802.11i  standard  for 
enhanced  WLAN  security  has  been 
ratified,  can  IT  assume  that  WLANs  have  grown  as 
secure  as  their  cabled  counterparts? 

Hardly. 

It  will  take  time  for  vendors  to  migrate  their  prod¬ 
ucts  to  802.111,  approved  in  June,  and  for  IT  organiza¬ 
tions  to  adopt  them.  And  the  Wi-Fi  Alliance  won’t 
even  start  interoperability  testing  of  802. lli  products 
until  next  month. 

More  important,  802.11i  represents  just  the  finish¬ 
ing  touch  to  a  series  of  steps  in  wireless  security 
standards  development.  Much  of  it  has  already  been 
available  for  about  18  months  in  an  802.11i  subset 
called  Wi-Fi  Protected  Access  (WPA).  And  while 
standards-based  security  technology  plays  a  big  part 
in  protecting  enterprises,  the  issues  reach  beyond  a 
signed  set  of  technical  specs. 

For  example,  there’s  a  broad  installed  base  of  spe¬ 
cialized  client  devices,  such  as  bar  code  scanners, 
that  run  the  MS-DOS  operating  system.  They  are  not 
upgradable,  even  to  earlier  versions  of  authentica¬ 
tion  and  encryption,  let  alone  to  802.11i,  which  re¬ 
quires  Advanced  Encryption  Standard  protection. 
AES  will  require  hardware  upgrades  —  even  for 
far  newer  products.  As  enterprises  expand  their 
WLANs,  these  legacy  devices  might  well  become 
the  weakest  link  in  the  wireless  security  chain. 

And  some  administrators  lack  confidence  in  their 
ability  to  properly  implement  the  various  pieces  of 
WLAN  security,  particularly  since  new  attacks  regu¬ 
larly  make  headlines. 

Asserts  Pete  Davis,  assistant  network  engineer 
for  the  Spring  Independent  School  District  in  Spring, 
Texas,  “It  requires  much  time  and  effort  to  deter¬ 
mine  what’s  real  and  what’s  market-speak.  There’s 
a  lot  of  FUD  [fear,  uncertainty  and  doubt]  being 
spread  about  wireless  security.” 


Technology  Headway 

The  formal  802.11i  standard,  which  includes  WPA, 
does  bolster  the  confidentiality  and  integrity  of 
WLANs.  Tom  Hagin,  vice  president  of  the  wireless 
business  practice  at  integrator  NetXperts  Inc.  in 
San  Ramon,  Calif.,  says  the  standard  has  taken  Wi-Fi 
security  “from  prepuberty  to  just  past  puberty.” 

“In  the  past  six  months,  we  haven’t  had  anyone  say 
they  weren’t  going  to  install  wireless  because  it  isn’t 
secure.  Prior  to  that,  we  did,”  he  says. 

WPA,  available  in  many  WLAN  network  interface 
cards  (NIC)  and  access  points  (AP),  was  developed 
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after  university  researchers  demonstrated  the  ease 
with  which  hackers  could  break  static  encryption  keys 
in  the  802.11’s  Wired  Equivalent  Privacy  (WEP)  mech¬ 
anism  in  2001.  WPA  requires  products  to  rotate  en¬ 
cryption  keys  on  a  per-packet  basis  so  they  are  much 
harder  to  crack.  WPA  also  uses  the  industry-standard 
802.1x  framework  for  strong  user  authentication. 

And  AES,  the  U.S.  government  block-cipher  stan¬ 
dard  for  128-bit  data  encryption,  replaces  the  RC4 
stream-cipher  encryption  that  WEP  and  WPA  use. 

Still,  “WPA  will  be  good  for  three  to  five  years 
before  those  smart  kids  who  broke  WEP  break  RC4. 
Then  everyone  will  need  AES,”  says  Michael  Disaba- 
to,  an  analyst  at  Burton  Group  in  Midvale,  Utah. 
802.11i  also  specifies  a  way  to  achieve  fast  secure 
handoffs  among  APs  (in  the  25-msec  range)  and  a 
simpler  authentication  scheme  for  small  WLANs. 

Practical  Limits 

But  technology  can  solve  only  so  much.  Through 
2006,  70%  of  successful  Wi-Fi  attacks  will  occur  as  a 
result  of  the  misconfiguration  of  APs  and  client  soft¬ 
ware,  according  to  Gartner  Inc. 

This  is  why  the  Bethesda,  Md.-based  SANS  Insti¬ 
tute,  which  offers  information  security  training  and 
certification,  recommends  regular  wireless  audits. 
“AES  is  great,”  says  Joshua  Wright,  deputy  director 
of  training.  “But  if  people  don’t  audit  their  networks, 
they  might  not  know  that  a  misconfigured  AP  isn’t 
using  it.  This  is  low-hanging  fruit  for  attackers.” 

Conducting  audits  requires  tasks  both  on  the 
wired  and  wireless  sides  of  the  network.  First,  says 
Wright,  administrators  should  regularly  download 
each  AP’s  configuration  and  make  sure  it  accurately 
reflects  the  organization’s  internal  security  policies. 

For  example,  if  an  enterprise  has  adopted  802.1x 
and  has  selected  Protected  Extensible  Authentication 
Protocol,  one  of  several  available  authentication 
methods,  network  administrators  should  regularly 
check  that  all  APs  are  indeed  configured  for  PEAP. 

In  addition,  airborne  packets  should  be  regularly 
examined  using  a  wireless  protocol  analyzer  to  verify 
that  they  are  actually  using  the  EAP  method  selected. 
“Sometimes  settings  on  APs  have  not  been  applied 
and  do  not  kick  in,”  Wright  says. 

Another  recommended  practice  is  treating  the 
WLAN  as  an  untrusted  network,  like  the  Internet, 
and  putting  a  firewall  or  gateway  where  wireless  and 
wired  networks  meet.  Though  this  is  a  well-estab¬ 
lished  guideline,  “a  lot  of  companies  don’t  do  it,” 
observes  Davis. 

The  Spring  school  district,  however,  has  deployed 
the  internal  firewalling  capabilities  in  Aruba  Wire¬ 
less  Networks  Inc.’s  WLAN  switches. 

“We  have  an  apartment  complex  behind  us,  and 
outsiders  could  poach  on  our  Internet  connection 
[without  the  firewall],”  Davis  notes.  “Our  district 
could  be  held  accountable  if  they  did  nefarious 
things  using  our  source  network  address.” 

Davis  says  the  setup  also  lets  him  use  an  access 
control  list  to  determine  which  network  resources 
are  available  to  each  user  in  the  26,700-student,  25- 
school  district.  Wireless  gateways  from  companies 
such  as  Bluesocket  Inc.  and  Vernier  Networks  Inc. 
provide  similar  access  control  list  functions. 

It  is  not  obvious  to  all  network  implementers  how 
to  glue  the  many  available  security  mechanisms  to- 


THREATS 

TO  WATCH 

Even  with  the  range  of  WLAN  security 
technologies  available  today,  risks  remain. 
Beware  of  these  three  threats: 

IDENTIFY  THEFT 

■  Merwyn  Andrade,  a  contributor  to  the  802.11i 
security  specification  and  chief  technical  offi¬ 
cer  at  Aruba  Wireless  Networks,  warns  that 
identity  theft  could  become  a  problem  for  en¬ 
terprises  using  WLANs.  For  example,  users 
with  802.11i  wireless  phones  might  save  their 
passwords  and  PINs  on  the  phone  for  conve¬ 
nience.  "This  would  be  like  keeping  your  keys 
to  your  house  in  your  wallet  and  then  losing  the 
wallet,”  he  says.  “Once  802.11i  is  pervasive, 
people  might  miss  that  they  have  to  worry 
about  authentication.” 


DEAUTHENTICATE  DENIAL- 
OF-SERVICE  (DOS)  ATTACKS 

■  Tools  like  Void'll  software  can  flood  a  client 
with  deauthentication  packets,  in  effect  telling 
clients  that  there  are  too  many  users  associat¬ 
ing  with  an  AP  and  to  seek  another  one.  Re¬ 
peated  flooding  of  such  legitimate  802.11  mes¬ 
sages  could  sustain  a  DoS  attack  on  clients 
indefinitely. 


MESSAGE  INTEGRITY  CHECK 

•  (MIC)  DOS  ATTACKS 

■  In  the  802.11i  specification,  the  MIC  protocol 
compares  MAC  headers  when  transmitted  and 
when  received.  If  they  differ,  they  are  deemed 
l  spoofed,  so  the  packet  is  dropped.  However,  if 

I  this  happens  twice  within  a  minute,  the  WLAN 

l  AP  tells  the  entire  network  to  log  off  and  stop 

I  accepting  traffic  for  a  minute.  Repeated  double 

•  MIC  changes  could  result  in  prolonged  DoS 
attacks. 

gether.  “Wi-Fi  security  is  not  something  that  you  can 
set  and  forget,”  says  Boris  Shubin,  director  of  IT  at 
Dunkin’  Donuts  Inc.,  which  recently  deployed  a 
wireless  speech-recognition-based  picking  system  in 
its  Swedesboro,  N.J.,  warehouse  using  centralized 
WLAN  switches  from  Airespace  Inc.  “APs  ship  wide 
open.  WLAN  security  is  iffy;  it’s  a  very  high-touch 
standard.” 

Dunkin’  Donuts  uses  media  access  control  address 
filtering  to  keep  suspicious  packets  off  its  network. 

If  a  MAC  client  source  address  isn’t  on  an  approved 


list  in  the  switch,  it  isn’t  allowed  access. 

Disabato  says  MAC  filtering  works  but  isn’t  scal¬ 
able.  “You  have  to  change  your  system  if  a  card 
breaks.  If  a  guest  leaves,  you  have  to  remember  to 
remove  their  MAC  address,”  he  says.  Such  labor- 
intensive  approaches  tend  to  be  less  secure  simply 
because  they  are  error-prone. 

Even  the  world’s  largest  WLAN  operator  —  Micro¬ 
soft  Corp.  —  isn’t  using  WPA  yet  on  its  4,500-AP 
WLAN,  built  on  APs  from  Cisco  Systems  Inc.  Many 
of  Microsoft’s  older  APs  are  first-generation  technol¬ 
ogy  and  are  not  WPA-capable. 

Microsoft  is  poised  to  make  a  wholesale  change  to 
its  global  WLAN  infrastructure,  which  supports 
about  100,000  unique  mobile  devices,  “lli  is  our  main 
goal,  but  we  can’t  move  to  it  yet  because  no  NICs 
support  it,”  says  Don  Berry,  the  wireless  network  en¬ 
gineer  who  has  overseen  Microsoft’s  global  WLAN 
implementation  since  1999. 

“We’re  assessing  what  the  various  EAP  security 
strengths  are,”  he  says.  “What  will  it  take  to  live 
day  to  day  using  a  particular  method?  How  many 
servers  would  each  type  require?  What’s  the  security 
strength  of  each?” 

Which  EAP? 

Most  enterprises  will  select  an  EAP  authentication 
method  based  on  the  type  of  database  they  have,  says 
Dave  Halasz,  who  chaired  the  802.11i  Task  Group  and 
is  manager  of  software  systems  in  Cisco’s  wireless 
networking  business  unit.  “If  you  don’t  already  have 
a  certificate  database  for  authenticating  users,  you 
might  not  put  one  in  just  for  wireless,”  he  says. 

In  fact,  notes  Kevin  Tseng,  senior  wireless  engi¬ 
neer  at  NetVersant  Solutions,  a  systems  integrator  in 
Seattle,  “most  companies  do  not  run  a  public-key  in¬ 
frastructure,”  which  is  required  for  using  EAP  meth¬ 
ods  that  use  client-  and  server-side  certificates,  such 
as  EAP-Transport  Layer  Security. 

Cisco’s  broadly  deployed  Lightweight  EAP 
supports  easier-to-manage  username/password 
schemes  but  is  prone  to  off-line  dictionary  attacks 
in  shops  that  can’t  enforce  strong  password  policies. 
LEAP  also  supports  mutual  authentication,  an 
802.11i  recommendation,  as  do  PEAP  and  another 
common  method,  EAP-Tunneled  Transport  Layer 
Security. 

“But  these  are  mostly  supported  in  smart  clients 
such  as  laptops,”  says  Tseng.  “Scanners  for  tracking 
inventory  don’t  support  them.”  He  estimates  that 
less  than  30%  of  devices  in  the  field  are  outfitted 
with  mutual  authentication  today,  leaving  many 
deployments  exposed. 

Still,  WLAN  security  has  come  a  long  way,  says 
Disabato.  “Two  years  ago,  people  who  hadn’t  been 
antenna-heads  for  very  long  didn’t  even  understand 
that  walls  don’t  stop  signals.  Now  that  people  are 
thinking  of  networks  radiating  in  a  360-degree 
sphere,  they’re  doing  much  better.”  ©  48342 


Wexler  is  a  freelance  writer  in  Silicon  Valley.  Contact 
her  at  joanie@jwexler.com. 
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experts  and  the  real-world  experience  and 
advice  of  your  IT  peers,  this  IT  Executive 
Summit  will  provide  an  overview  of  effective 
strategies  for  consolidating  and  connecting 
networks  and  data  center  applications. 
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ike  lucas,  IT  director  at 
Hogan  &  Hartson  LLP,  had 
had  enough.  The  Washing- 
ton-based  law  firm  was 
paying  $30,000  a  month  to 
back  up  data  on  more  than  400  servers 
located  in  27  offices  worldwide  and 
store  the  tapes  off-site.  Lucas  says  he 
couldn’t  stomach  the  cost  of  buying 
more  tape  drives  to  back  up  every  new 
print,  file  or  application  server. 

Along  with  the  increasing  costs,  the 
tape-based  infrastructure  created  ad¬ 
ministration  issues,  including  the  need 
to  sometimes  rely  on  nontechnical 
staffers  to  swap  out  tape  cartridges  in 
each  remote  office  every  night  and 
take  them  off-site. 

Then  there  were  the  software  glitch¬ 
es.  “We’d  have  trouble  from  time  to 
time  with  a  tape  getting  hung,  having 
to  do  a  reboot  of  a  server  during  off 
hours.  We  were  at  risk  of  not  having  a 
backup,”  Lucas  says,  adding  that  re¬ 
trieving  tapes  for  restoring  data  in  an 
emergency  could  take  more  than  a  day. 

Data  protection  executed  at  remote 
sites  is  often  a  hit-or-miss  scenario 
because  “no  one  knows  if  the  backup 
actually  happened  or  if  a  restore  can 
occur,”  says  Arun  Taneja,  an  analyst  at 
Taneja  Group  Inc.  in  Hopkinton,  Mass. 


Those  frustrations  led  Lucas  to  use 
a  remote  backup  strategy  that  brings 
backup  data  into  the  data  center,  where 
it  can  be  centrally  managed.  Vendors 
offer  a  variety  of  network-based 
schemes  that  pull  data  across  a  WAN 
to  a  central  repository.  These  systems 
are  simpler  to  manage  and  more  cost- 
effective  than  local  tape  backups,  ana¬ 
lysts  say. 

Most  include  software  and  appli¬ 
ances  that  replicate  data  from  branch 
offices  to  the  data  center,  where  it  is 
backed  up  to  a  disk  device  and/or  tape 
library.  This  model  eliminates  the  need 
for  media  handling  or  IT  support  at  re¬ 
mote  sites  and  offers  greater  security, 
since  backup  data  is  centralized. 

The  increasing  popularity  of  these 
systems  is  starting  to  affect  sales  of 
entry-level  tape  drives  commonly  used 
to  back  up  direct-attached  storage. 

IDC  in  Framingham,  Mass.,  is  forecast¬ 
ing  a  20%  decline  this  year  as  adminis¬ 
trators  increasingly  decide  not  to  back 
up  branch  servers  locally. 

The  Options 

Vendors  offer  several  approaches  to 
remote  backup.  Software  such  as 
Veritas  Software  Corp.’s  Storage  Repli¬ 
cator  and  CYA  Technologies  Inc.’s 


HotBackup  first  execute  a  complete 
backup  of  direct-attached  storage  on 
each  remote  server  or  network- at¬ 
tached  storage  appliance  and  then 
move  incremental  or  “delta”  changes 
over  the  WAN  to  the  data  center. 

Some  organizations  with  branch  of¬ 
fices  that  host  multiple  servers  are 
choosing  to  first  consolidate  backups 
to  a  local  disk-backup  appliance  before 
replicating  data  across  the  WAN.  The 
appliance  can  complete  server  backups 
quickly  across  a  LAN  and  then  stream 
updates  over  the  slower  WAN  connec¬ 
tion  to  the  data  center,  where  it  can  be 
archived  to  tape. 

For  workstation  backups,  some 
storage  administrators  are  creating 
virtual  drives  on  remote  end-user  PCs 
and  mapping  those  to  a  file  server 
back  in  the  data  center.  To  avoid  per¬ 
formance  problems  over  the  WAN, 
administrators  install  a  local  data- 
caching  appliance  that  gives  users 
access  to  their  files  at  LAN  speeds 
while  updates  stream  in  the  back¬ 
ground  to  the  back-end  appliance  in 
the  data  center. 

Lucas  contracted  with  DS3  Data 
Vaulting  LLC,  a  service  provider  in 
Fairfax,  Va.,  for  his  network  backup 
system,  which  includes  disk-based  ap- 


REMOTE  BACKUP 
SYSTEMS 

■  Ease  backup  manage¬ 
ment  headaches  by 
removing  tape  drives  from  branch  of¬ 
fices  and  consolidating  them  in  the 
data  center. 

■  Afford  greater  security  by  centraliz¬ 
ing  backup  data. 

■  Eliminate  need  for  branch  office  staff 
involvement  in  backup  processes  such 
as  tape  rotations. 

i  Experience  problems 
with  replication  through¬ 
put  if  WAN  bandwidth  is  insufficient. 

■  Require  additional  software,  adding 
complexity  to  the  backup  process. 

■  Require  upfront  investment  in  soft¬ 
ware  and  possibly  hardware  as  well, 
depending  on  the  system  chosen. 


pliances  and  software  from  Asigra  Inc. 
in  Toronto.  Asigra’s  Televaulting 
DS-Client  software  runs  on  servers, 
desktops  and  laptops  connected  to 
each  remote  office  LAN  and  automates 
the  backup  of  about  3TB  of  com- 
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Thanks  to  remote  data  replication  and 
disk-based  backup  technologies,  the  data 
center  is  reasserting  control  over  branch- 

office  backups.  BY  LUCAS  MEARIAN 
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exchange  innovative  ideas  and  strategies  with  other  executives  who  share  the  same 
objectives?  Then  attend  Storage  Networking  World,  where  you’ll  network  with  and  learn 
from  renowned  experts  and  the  nation's  top  user  executives. 


Conference  At-a-Glance  ( subject  to  change) 

For  details,  updates,  and  to  register  visit  www.snwusa.com/cw 

MONDAY,  OCTOBER  25 


9:30am  to  10:25am 

1  INDUSTRY  PRIMER  TRACK 

1  INDUSTRY  PRIMER  TRACK 

1  CAREER  DEVELOPMENT  TRACK  1 

Addressing  High 

Density  Cooling  of 
Storage  Networking 
Equipment  at  the 

Facility  Level 

Donald  Beaty,  Founder  & 

President,  DLB  Associates 

Storage  Basics 
and  Trends 

Dennis  Martin,  Senior  Analyst, 
and  Greg  Schulz,  Senior  Analyst, 
Evaluator  Group 

Power  Statements, 
Questions  and 

Answers  Techniques 

Howard  Goldstein,  Founder, 

Howard  Goldstein  Associates,  Inc. 

10:35am  to  1 1 :30am 

Role  of  Server  Blades 
and  Virtualization  in  Next 
Generation  Data  Center 

Arun  Taneja,  Founder  and 
Consulting  Analyst,  Taneja  Group 

Why  Tape  Continues 
to  Make  the  Grade 

Richard  Harada,  President,  Tape 
Technology  Council 

1 1 :30am  to  1 :00pm  Luncheon 


Afternoon 


SNIA  Tutorial  Sessions 

1 :00pm  to  6:40pm 


•  Data  Lifecycle 

-  Virtualization  & 
Securing  Your  Storage 

•  Focus  on  Networking 
Your  Storage 

•  Focus  on  Storage 

•  SAN  Management 

•  Voice  of  the  User 

^*SNIA 


IDC  Briefing  Session 

1 :00pm  to  4:00pm 


#  IDC 

In  this  fast-paced  session,  IDC's 
top  storage  analysts  will  examine 
companies'  growing  interest  in 
deploying  tiered  storage  solutions 
and  assess  its  impact  on  storage 
components,  systems,  networks, 
management  and  services. 


IT  End-User  Golf  Outing 

noon  to  approximately  6:00pm 


The  pre-  SPONSORED  BY 
conference  Quantum 

golf  outing  - - - 

at  the  Ritz-Carlton  Golf  Club  located 
adjacent  to  the  JW  Marriott  Grande 
Lakes  Resort  is  complimentary  (a 
$125  value)  for  registered  IT  end- 
users.  (Other  participants,  including 
sponsors  and  vendor  representatives, 
may  play  on  an  ‘&s  available"  basis 

and  are  responsi¬ 
ble  for  all  applica¬ 
ble  golf  outing 
expenses.) 

To  secure  your  spot, 
contact  Michael  Meleedy  at 
1-508-820-8529. 


7:00pm  to  9:00pm  Welcome  Reception 


October  25-28,  2004  *  JW  Marriott  Grande  Lakes  Resort  *  Orlando,  Florida 


For  more  information  and  to  register,  visit  www.snwusa.com/cw  or  call  1  -800-883-9090 


TUESDAY,  OCTOBER  26  General  Sessions  Begin 


8:30am  to  9:15am 
9:15am  to  9:45am 
9:45am  to  10:15am 
10:30am  to  1 1 :00am 
1 1 :00am  to  1 1:30am 


Don  Tapscott,  Renowned  Bestselling  Author  of  The  Naked  Corporation, 
Growing  Up  Digital  and  Paradigm  Shift 

The  Future  of  Knowledge  Management 

John  Halamka,  MD,  CIO,  CareGroup  Health  System  and  Harvard  Medical  School 

Kevin  Rollins,  President  &  COO,  Dell 

Keith  Glennan,  VP  &  CIO,  Northrop  Grumman  IT 

Elevating  the  Art  of  Storage 

Shinjiro  Iwata,  CEO,  Hitachi  Data  Systems 


1 1 :30am  to  noon  Industry  Presidents’  Roundtable:  A  Market  Outlook 

Moderator:  Don  Tapscott,  Author  of  The  Naked  Corporation.  Growing  Up  Digital  and  Paradigm  Shift 


12:15pm  to  1 :30pm 

CONCURRENT  LUNCHEON  SESSIONS 

General  Networking  Luncheon  Session  Luncheon  Session: 

Luncheon  Steve  Duplessie,  Founder  Measuring  the  Value 

On  the  Valencia  Lawn  &  Senior  Analyst,  of  IT  Investments 

Enterprise  Storage  Group  *  7\  Richard  Sneider, 

tjwB  Managing  Partner, 
InterUnity  Group 

1 :30pm  to  2:00pm 

End  User  Case  Study:  Best  Practices:  Data  Center  Consolidation 

David  Cohen,  VP,  Technology  Architecture  Group,  Merrill  Lynch 

2:00pm  to  2:30pm 

Ckfl  Greg  Reyes,  Chairman  &  CEO,  Brocade  Communications  Systems 

2:30pm  to  3:00pm 

W&m 

K.  1  End  User  Case  Study:  Evaluating  Options  for  Business 
Continuity/Disaster  Recovery  Plans 

Rod  Mueller,  Manager  of  Technology  and  Infrastructure,  International  Paper 

3:00pm  to  3:45pm 

CTO  Insights  Panel 

jdHH  Moderator:  Jon  William  Toigo,  CEO  &  Founder,  Toigo  Partners  International 

4:00pm  to  5:30pm 

CONCURRENT  SESSIONS 

5:30pm  to  8:30pm  Expo  with  Dinner  /  Interoperability  &  Solutions  Demo  Open 

pDEMO 

WEDNESDAY,  OCTOBER  27 


|  5:30pm  to  8:30pm 

&  Solutions  r 


8:30am  to  9:15am 

|T^|  Nick  Carr,  former  Executive  Editor  of  the  Harvard  Business  Review 
■jjjjjj  and  author  of  Does  IT  Matter? 

9:15am  to  9:45am 

9:45am  to  10:15am 

End  User  Case  Study 

Industry  Leader  Presentation 

10:30am  to  1 1:00am 

K  J  End  User  Case  Study:  Realizing  the  Vision  of  Management  Simplicity 
and  Improved  Business  Processes  in  a  Demanding,  Distributed, 
High-Performance  Environment 

Michael  Prince,  VP  &  CIO,  Burlington  Coat  Factory 

1 1 :00am  to  1 1 :30am 

f^Tk'  The  Half-Life  of  Storage  Trends 

Peter  van  Oppen,  Chairman  &  CEO,  ADIC 

1 1 :30am  to  12:15pm 

Panel:  End  Users  Speak  Out 

nt'iU  Moderator:  John  Dix,  Editor  in  Chief,  Network  World 

12:15pm  to  1 :45pm 
1:45pm  to  2:15pm 

Expo  &  Luncheon 

End  User  Case  Study 

INTEROPERABILITY  &  SOLUTIONS 
DEMO  OPEN 

12:15pm  to  7:15pm 

2:15pm  to  2:45pm 

2:45pm  to  3:30pm 

Industry  Leader  Presentation 

Analyst  Roundtable  Panel 

Moderator:  Jon  William  Toigo,  CEO  &  Founder,  Toigo  Partners  International 

[  Interoperability 

w  &  Solutions 

SDEMO 

See  SNW’s  Interoperability 

3:45pm  to  5:15pm 

CONCURRENT  SESSIONS 

&  Solutions  Demo 

•  40-plus  SNIA  member  companies 
collaborating  on  integrated  solutions 

•  the  opportunity  to  meet  leading 
experts  and  engineers 

5:15pm  to  7:15pm 
7:30pm  to  9:00pm 

Expo  and  Reception 

Gala  Evening,  Dinner  and  Entertainment 

THURSDAY,  OCTOBER  28 

7:30am  to  8:30am 

Breakfast 

8:30am  to  Noon 

CONCURRENT  TECHNICAL  &  BUSINESS  TUTORIALS 

Noon 

Conference  Concludes 

SNW,  more  than  other 
conferences,  brings  together 
all  the  right  vendors  and  all 
the  right  users  -  users  who 
can  properly  leverage 
available  technology  and 
influence  vendors  in 
developing  the  next  generation 
of  storage  products  ...” 

Andre  Mendes 
\  Chief  Technology 
:  Integration  Officer 
Public  Broadcasting  Service 


SNW  is  a  great  venue 
for  peer  discussion  ...  an 
opportunity  to  provide 
feedback  to  vendors  on 
what  users  need  from  them  ... 
I  sat  down  with  my  key 
vendors  and  shared 
information  ...” 

John  Greer 

Director,  IT  Infrastructure 
Pacific  Gas  &  Electric 


JW  Marriott 
Grande  Lakes 
Resort 

Orlando,  Florida 

Hotel  Reservations 
and  Travel  Services 

IDG  Travel  is  the  official 
travel  company  for  Storage 
Networking  World.  They 
are  your  one-stop  shop 
for  exclusive  discounted  rates  on 
hotel  accommodations. 

To  reserve  your  accommodations,  visit: 

www.etcentral.com 

You  can  also  call  our  conference  housing  line  at: 

1-800-340-2262  (or  1-508-820-8686) 


■IDG 

TRAVEL  SERVICES 


For  more  information  and  to  register,  visit  www.snwusa.com/cw  or  call  1-800-883-9090 
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STORAGE 

NETWORKING 
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COMPUTERWORLD 

October  25-28,  2004 
JW  Marriott 
Grande  Lakes  Resort 
Orlando,  Florida 


Application  for  Conference  Registration 

Fax  this  completed  application  to  1-508-820-8254  or  apply  online  at:  www.snwusa.com/cw 


Your  business  card  is 
REQUIRED 

to  process  your  application 

Please  affix  your  business  card  to  this  space  prior  to 
submitting  your  application.  Applications  submitted 
without  business  cards  will  not  be  processed. 

Questions?  Call  1-800-883-9090 


If  not  indicated  on  your  business  card,  please 
provide  the  following  required  information: 


Corporate  Email  Address 


Corporate  Website 


Registration  questions? 

Call  1  -800-883-9090  or  email  snwreg@compuierworld.com 

Need  accommodations? 

Reserve  them  at:  www.etcentral.com 

Please  call  1  -800-*340-2262 
or  email:  eventhousing@ldg.com 


Please  check  ONE  of  the  following: 

Earlybird  Registration  (through  September  14,2004) 

Full/Onsite  Registration  (after  September  14. 2004) 

□  1  am  an  IT  End-User* 

(Complete  Attendee  Profile  below) 

□  $895  General  Conference  Package  (October  26  &  27) 
(includes  General  Conference  Sessions,  Expo,  Meals  &  Receptions)  '  ■ 

□  $1,290  Total  4-Day  Package  (October  25,  26,  27,  28) 

(includes  General  Conference,  plus  Technical  and  Business  Tracks, 
SNIA-produced  Tutorials,  SNIA-Certification  “Test-Ready”  Courses) 

□  $1,295  General  Conference  Package 

(includes  General  Conference  Sessions,  Expo,  Meals  &  Receptions) 

□  $1,690  Total  4-Day  Package  (October  25,  26,  27,  28) 

(includes  General  Conference,  plus  Technical  and  Business  Tracks, 

SNIA-produced  Tutorials,  SNIA-Certification  “Test-Ready"  Courses) 

*  IT  End-Users  are  defined  as  those  who  are  attending  Storage  Networking  World  with  an  intent  (and  an  IT  spending  budget)  to  potentially  buy/lease  hardware/software/services,  etc.  from  our  conference  sponsors  and  are  not  themselves  an  IT  vendor.  As  such,  account  representatives, 
business  development  personnel,  analysts,  consultants  and  anyone  else  attending  who  does  not  have  IT  purchasing  influence  wrthin  their  organization  are  excluded  from  the  “IT  End-User"  designation.  Interpretation  and  enforcement  of  this  policy  are  at  the  sole  discretion  of  Computerworld. 


U  I  am  a  Channel  Partner/ 
Integrator/Consultant 

(Complete  Attendee  Profile  below) 


□  $3,000  Total  4-Day  Package  (October  25,  26,  27,  28) 

(includes  General  Conference;  Technical  and  Business  Tracks, 
SNIA-produced  Tutorials,  SNIA  Certification  “Test-Ready"  Courses) 


□  $3,300  Total  4-Day  Package  (October  25,  26,  27,  28) 

(includes  General  Conference;  Technical  and  Business  Tracks, 
SNIA-produced  Tutorials,  SNIA  Certification  “Test-Ready"  Courses) 


By  participating  in  SNWs  Channel  Partner/Integrator  registration  package,  registrants  may  enjoy  the  following  benefits:  One  company  representative  may  receive  a  full  conference  pass  to  SNW  Fall  2004;  additional  company  representatives  pay  $695  each 
for  full  conference  passes;  company  may  invite  up  to  five  IT  User  customers  to  attend  SNW  Fall  (IT  Users  must  be  strictly  compliant  with  IT  User  definition  on  the  supplied  registration  form);  companies  registering  for  this  package  interested  in  joining  the 
SNIA  are  eligible  to  receive  a  $2,000  discount,  provided  that  membership  is  applied  for  prior  to  January  1, 2005. 


completed  by  IT  End-Users  and  Channel  Partners/Integrators/Consultants  only  (optional  for  all  other  registrations) 


□  Manufacturing  (IT)  (Channel/Integrator/Consultants  Only) 

□  Computer  Retailer/Dealer/Wholesaler 
(Channel/Integrator/Consultants  Only) 

□  Software  Development  (Storage) 
(Channel/Integrator/Consultants  Only) 

□  Other  Computer  Related  (Storage) 
(Channel/Integrator/Consultants  Only) 

□  Other 


The  one  item  that  best  describes  your  involvement  in  the 
IT  purchase  process 

□  Authorize  the  purchase 

□  Approve  the  budget 

□  Initiate  the  purchase 

□  Evaluate/recommend  products,  brands,  vendors 

□  Identify/establish  the  need  to  purchase 

□  All  of  the  above 


Attendee  Profile:  This  section  MUST  be 

Your  Business/Industry 

□  Transportation/Utilities 

□  Mming/Oil/Gas 

□  Non-Profit/Trade  Association 

□  Media/Publishing 

□  Banking 

□  Finance 

□  Accounting 

□  Insurance 

□  Real  Estate 

□  Telecommunications 

□  Wholesale/Retail  (non-computer) 

□  Computer  Service  Provider 

□  Advertising/Marketing/Public  Relations 

□  Entertainment 

□  Education 

□  Food  Industry 

□  Government/Military 

□  Healthcare/Medical  Services 

□  Travel/Hospitality/Recreation 

□  Manufacturing  (non-IT) 

□  VAR/VAD/ ASP/System  Integrator 
(Channel/Integrator/Consultants  Only) 

□  Industry  Consultant/Storage  Solution  Integrator 
(Channel/Integrator/Consultants  Only) 


Your  Job  Title/Function 

□  CEO/COO/Chairman/President 

□  CIO/CTO 

□  VP/GM/Director 

□  IS/IT  Director/Manager 

□  Other  IS/IT  Department  Manager/Supervisor 

□  Other  Corporate/Business  Manager 

□  CEO/COO/Chairman/President 
(Channel/Integrator/Consultants  Only) 

□  CFO/Controller/Treasurer 
(Channel/Integrator/Consultants  Only) 

□  VP/GM/Director  (Channel/Integrator/Consultants  Only) 

□  Sales/Marketing/Product  Staff 
(Channel/Integrator/ Consultants  Only) 

□  CIO/CTO/Other  IS/IT  Manager 
(Channel/Integrator/Consultants  Only) 

□  Engineering  Staff  (Channel/Integrator/Consultants  Only) 


Number  of  employees  in  your  entire  organization  (ALL  locations) 

□  Over  10,000 

□  5,000  -  9,999 

□  1.000-4,999 

□  500  -  999 

□  Less  than  500 

What  is  the  estimated  annual  revenue  of  your  entire 
organization? 

□  Over  $10  Billion 

□  $1  Billion  -  $9.9  Billion 

□  $500  Million  -  $999  Million 

□  $100  Million  -  $499  Million 

□  Less  than  $100  Million 


in  order  to  process  your  application. 

Your  organization's  annual  IT/IS  budget  for  all  IT/IS 
products,  or  if  you  are  a  Channel/Integrator  Partner  or 
Consultant,  what  is  the  annual  dollar  value  of  IT  prod¬ 
ucts/services  you  sell/resell/recommend/influence  for 
purchase  by  your  customers/clients. 

□  0ver$1  Billion 

□  $500  Million  -  $999  Million 

□  $100  Million  -  $499  Million 

□  $10  Million  -  $99  Million 

□  $1  Million  -  $9.9  Million 

□  Less  than  $1  Million 

Annual  company  IT  budget  (storage  products  and  services) 

□  Over  $1  Billion 

□  $500  Million  -  $999  Million 

□  $100  Million  -  $499  Million 

□  $10  Million  -  $99  Million 

□  $1  Million  -  $9.9  Million 

□  Less  than  $  1  Million 

Would  you  like  to  receive  information  about  playing  in 
the  golf  outing  on  Monday,  October  25th? 

□  Yes 

□  No 


(D  company  is  Sponsoring/ 
Exhibiting  at  SNW 


□  $895  (through  September  14,  2004) 

General  Conference  Package  (October  26  &  27) 

(includes  General  Conference  Sessions,  Expo,  Meals  &  Receptions) 

□  $1,290  Total  4-Day  Package  (October  25,  26,  27,  28) 
(includes  General  Conference,  plus  Technical  and  Business  Tracks, 
SNIA-produced  Tutorials,  SNIA-Certification  “Test-Ready"  Courses) 


□  $1,295  (after  September  14,  2004) 

General  Conference  Package  (October  26  &  27) 

(includes  General  Conference  Sessions,  Expo,  Meals  &  Receptions) 

□  $1,690  Total  4-Day  Package  (October  25,  26,  27,  28) 

(includes  General  Conference,  plus  Technical  and  Business  Tracks, 
SNIA-produced  Tutorials,  SNIA-Certification  "Test-Ready"  Courses) 


As  a  sponsor,  you  may  be  eligible  to  attend  using  a  registration  provided  with  your  sponsorship.  (If  those  registrations  have  already  been  assigned/used,  then  you  may  register  at  the  prevailing  rates  above.)  See  the  current  list  of 
sponsors  at  www.snwusa.com.  Questions?  Call  1  -800-883-9090  or  email  snwreg@computerworld.com. 


□  I  am  a  representative  of  a  Non-Sponsoring  IT  Vendor  Company 

□  $5,000  Business  Development  Professional  Package  for  Sales,  Marketing  and  Business  Development  Professionals  (includes  General  Conference  Sessions.  Expo.  Meals  &  Receptions) 


Vendors  are  encouraged  to  participate  in  Storage  Networking  World  through  sponsorship.  (Details  are  available  by  calling  Ann 
Harris  at  508-820-8667.)  Alternatively,  vendors  (as  well  as  other  “non-IT  end-user"  professionals  as  defined  by  Computerworld), 
may  apply  for  registration  at  the  “non -sponsoring  vendor"  rate  of  $5,000.  Determination  of  what  constitutes  a  “non -sponsoring 
vendor"  registration  is  made  exclusively  by  Computerworld.  Please  call  888-239-4505  with  questions. 


□  I  am  a  Financial/Equity  Analyst 

□  $1,290  (through  September  14,  2004) 
General  Conference  Package 

(includes  General  Conference  Sessions,  Expo, 
Meals  &  Receptions) 


and/or  Venture  Capital  Professional 

□  $1,690  (after  September  14,2004) 
General  Conference  Package 
(includes  General  Conference  Sessions,  Expo, 
Meals  &  Receptions) 


□  I  am  a  qualified  member  of  the  press.  I  can  verify  my  press  credentials. 

Press  should  call  Erin  Keefe  at  1  -781-915-5009  to  register. 

Please  fax  this  completed  application 
to  1-508-820-8254 


Payment  Method 

□  Check  ( checks  must  be  received  by  October  5,  2004  payable  to:  Computerworld) 

Mall  to:  Computerworld,  Attn:  Pam  Malingowskl,  500  Old  Connecticut  Path,  Framingham,  MA  01701 

□  American  Express  □  VISA  □  MasterCard 

Account  Number: _ 

Expiration  Date: _ 

Card  Holder  Name:  _ 

Signature  of  Card  Holder: _ 

Cancellation  Policy  (All  of  the  following  require  written  notification  by  October  5, 2004.) 

In  the  event  of  cancellation,  the  registrant  has  three  options: 

1 )  He  or  she  may  substitute  another  attendee  for  this  conference. 

2)  He  or  she  may  transfer  this  registration  to  the  Storage  Networking  World  Spring  2005  conference. 

3)  The  registration  fee  will  be  refunded,  less  a  $250  service  charge  (if  written  notice  is  received  by  October  5, 2004). 
Please  send  cancellation  requests  via  email  to:  snwreg@computerworld.com 


www.computerworld.com 


TECHNOLOGY 
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pressed  data  from  local  backup  appli¬ 
ances  in  10  offices  over  the  WAN  to  an 
AT&T  data  center. 

After  completing  an  initial  full  back¬ 
up,  the  remote  appliance  provides  up¬ 
dates  only  for  changed  data  blocks.  It 
eliminates  duplicate  files,  encrypts  the 
data  and  compresses  it  at  a  2-1  ratio  be¬ 
fore  automatically  sending  it  across 
the  WAN  on  a  scheduled  basis. 

Lucas  expects  a  two-year  payback 
on  his  investment.  The  initial  system 
installation  in  Hogan  &  Hartson’s  cen¬ 
tral  office  cost  about  $13,000.  He  has 
deployed  10  offices  to  date  and  is  con¬ 
tinuing  to  roll  out  the  technology. 


Caching  Up 


Companies  such  as  Actona  Technolo¬ 
gies  Inc.  (recently  acquired  by  Cisco 
Systems  Inc.),  Riverbed  Technology 
Inc.,  Disksites  Inc.  and  Tacit  Networks 
Inc.  use  appliances  at  both  the  remote 
site  and  the  central  data  center  for 
global  file  sharing.  The  appliances 
speed  up  access  to  shared  files  in  part 
by  removing  the  overhead  associated 
with  file-serving  protocols  such  as  the 
Common  Internet  File  System  and 
Network  File  System. 

Mukesh  Shah,  director  of  network 
services  at  The  Associated  Merchan¬ 
dising  Corp.  (AMC)  in  Plainfield,  N.J., 
is  in  charge  of  file-sharing  operations 
among  40  remote  locations  in  a 

worldwide  network  that  includes 
data  center  hubs  in  Hong  Kong 
and  New  Jersey. 

AMC  uses  MetaFrame  serverware 
from  Fort  Lauderdale,  Fla.-based  Citrix 
Systems  Inc.,  which  gives  Windows  XP 
PCs  and  wireless  devices  virtual, 
thin-client  access  to  applications 
running  on  back-end  servers.  It 
also  uses  the  New  Jersey  data 
center  for  global  file  sharing 
of  Excel  spreadsheets,  Micro¬ 
soft  Word  documents  and 
other  files. 

But  users  in  Asia  and  Eu¬ 
rope  were  waiting  more  than 
two  minutes  for  remote  files 
to  open.  The  system  also  lacked 
adequate  file-locking  safeguards 
for  some  shared  files.  Users  were 
“quite  unhappy,”  Shah  says. 

Eight  months  ago,  Shah  began 
piloting  a  caching  appliance  from 
South  Plainfield,  N.J.-based  Tacit 
Networks  in  his  New  Jersey  data 
center.  File-access  times  dropped 
from  an  average  of  122  seconds 
to  11  seconds  on  first  access  and 
eliminated  the  end-user  wait 


BACKING  UP  THE  BRANCH  OFFICE 


In  a  typical  remote  office  scenario, 
PCs  and  application  servers  in  branch 
offices  running  backup  client  pro¬ 
grams  are  backed  up  throughout  the 
day  to  a  local  disk  appliance.  From 
there,  data  is  automatically  replicated 
across  a  WAN  link  to  another  appli¬ 
ance  in  the  data  center.  The  data  is 
then  streamed  to  a  tape  library  for 
archiving. 
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altogether  on  subsequent  attempts 
after  the  file  was  loaded  into  the  local 
appliance’s  cache. 

“Tacit  has  a  process  where  you  can 
push  files  to  a  local  cache  on  a  sched¬ 
uled  basis,”  Shah  says.  “So  when  users 
go  to  access  the  file,  it’s  already  there.” 

When  users  change  and  save  the 
file  back  to  the  cache,  it’s  also  saved 
on  the  main  file-sharing  server  in 
New  Jersey,  where  AMC  staffers  back 
it  up.  “All  restores  can  be  done  cen¬ 
trally,  whereas  if  we  had  to  substitute 
the  cache  appliance  with  a  file  server, 
we’d  have  the  complexity  of  backups 
and  restores  at  the  remote  office  level,” 
Shah  says. 

Outsourcing  It  All 

Overworked  IT  organizations  that 
don’t  have  the  time  or  resources  to  set 
up  a  remote  backup  system  can  con¬ 
sider  similar  offerings  from  service 
providers. 

Brian  Asselin,  IT  director  at  Harbor- 
side  Healthcare  Corp.,  a  Boston-based 
long-term  care  company,  oversees  op¬ 
erations  for  55  locations  and  8,500  em¬ 
ployees,  but  he  says  he  has  only  one  IT 
person  for  each  of  the  nine  states  in 
which  facilities  are  located. 

Harborside  had  been  using  direct- 
attached  tape  backup  for  its  remote 
application  servers,  but  Asselin  says 
ensuring  that  backups  occurred  and 
performing  restores  were  a  nightmare. 

“Our  people  working  in  the  facilities 
are  definitely  technically  challenged,” 
he  says.  “Logistically,  it  would  be  im¬ 
possible  to  restore  with  the  people 
I  have.” 

What’s  more,  the  Health  Insurance 
Portability  and  Accountability  Act 
requires  greater  security  around  pa¬ 
tient  information  than  Harborside’s  IT 
infrastructure  can  provide,  Asselin 
says.  “There’s  just  a  slew  of  security 
that  needs  to  be  in  place  by  2005  for 
HIPAA,”  he  says. 

Instead  of  building  a  central  data 


center  where  data  could  be  replicated 
for  disaster  recovery  purposes  and  fur¬ 
ther  burdening  his  IT  staff,  Asselin 
chose  service  provider  AmeriVault 
Corp.  in  Waltham,  Mass.,  to  host  back¬ 
up  data  storage  and  handle  daily  repli¬ 
cation  from  the  remote  sites. 

AmeriVault  installed  its  Central- 
Control  software  on  Harborside’s 
desktops  and  an  agent  on  each  of  its 
servers.  After  completing  an  initial  full 
backup  of  all  data,  the  vendor  per¬ 
forms  daily,  incremental,  encrypted 
backups  over  the  Internet  to  its  disas¬ 
ter  recovery  centers. 

In  an  emergency,  administrators  at 
Harborside  can  perform  data  restores, 
even  from  home,  using  a  point- and- 
click  application  on  AmeriVault’s  Web 
portal.  Alternatively,  data  can  be 
shipped  on  tape  for  large  restores. 

Asselin  says  AmeriVault  has 
“processes  and  procedures”  that  are 
HIPAA-compliant,  which  relieves  his 
staff  from  having  to  set  up  its  own 
compliance  program.  And  Asselin 
says  he  also  reduced  labor  costs  by 
outsourcing  his  remote  backup  and 
recovery  architecture  because  “we 
don’t  have  to  have  people  running 
around  dedicated  to  the  task  of 
backup.” 

But  while  the  remote  backup 
technology  made  processes  more 
efficient,  the  outsourcing  approach 
wasn’t  necessarily  cheaper. 

“In  terms  of  actual  backup  cost, 
it’s  pretty  much  a  wash.  When  you 
consider  bandwidth  and  license 
payments  for  software,  it’s  pretty 
much  even  with  other  backup  solu¬ 
tions,”  Asselin  says. 

Tony  Asaro,  an  analyst  at  Enter¬ 
prise  Storage  Group  Inc.  in  Mil¬ 
ford,  Mass.,  says  the  costs  of  edge 
network  backup  technologies  are 
continuing  to  drop,  and  as  large 
companies  investigate  using  these 
systems,  big  vendors  are  stepping 
in  with  new  products. 


Asaro  points  to  EMC  Corp.’s  entry- 
level  Clariion  AX100  array,  which  can 
be  directly  attached  to  its  NetWin  110 
NAS  Gateway  or  bought  as  a  precon¬ 
figured  storage-area  network  with 
backup  and  storage  management  soft¬ 
ware  for  remote  office  backup. 

And  EMC’s  Legato  RepliStor  replica¬ 
tion  software  is  bundled  with  switches 
from  Brocade  Communications  Sys¬ 
tems  Inc. 

“I  don’t  think  it’s  a  fad,”  Asaro 
says.  “I  think  more  people  are  going 
to  adopt  this  technology  because  it’s 
cost-effective.”  ©  48547 
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A  retired  Air  Force 
general  aims  to  bring 
military  discipline 
to  software 


On  Aug.  1,  Retired  U.S. 
Air  Force  Maj.  Gen.  Paul 
D.  Nielsen  became  CEO 
and  director  of  Carnegie 
Mellon  University’s  Soft¬ 
ware  Engineering  Insti¬ 
tute  in  Pittsburgh.  Before 
assuming  his  new  job, 
Nielsen  talked  to  Com- 
puterworld’s  Linda 
Rosencrance  about  what 
his  work  in  the  military  means  for  the 
future  of  IT  and  about  his  agenda  for 
the  SEI. 

What  are  some  leading-edge  IT  research 
areas  in  the  military?  How  could  they  be  ap¬ 
plied  to  the  commercial  world  in  the  future? 

The  military  leads  in  large-scale  inte¬ 
gration.  In  the  past,  we  had  communi¬ 
cation  networks  that  operated  at  differ¬ 
ent  frequencies  that  made  it  hard  for 
people  to  talk  to  someone  who  was  on 
a  different  frequency  or  a  different 
kind  of  receiver.  So  we’re  trying  to  in¬ 
tegrate  all  those  systems  so  people  can 
do  cross-banding  —  so  a  person  who 
has  a  UHF  radio  ultimately  can  net¬ 
work  into  a  trunk  that’s  maybe  at  satel¬ 
lite  frequency  back  to  the  States  and 
then  talk  to  someone  and  get  informa¬ 
tion  back. 

I  think  that’s  an  application  the 
commercial  world  could  benefit  from. 
When  you  think  that  there  is  one  satel¬ 
lite  providing  cable  TV  to  the  entire 
coast  of  the  U.S.,  losing  a  satellite 
could  be  a  terrible  thing.  But  if  you 
could  do  some  of  this  cross-banding, 
cross-networking,  you  might  have 
some  ways  to  work  around  issues  like 


that  and  lease  services  on  some  other 
satellite  to  start  to  provide  services  to 
people  that  you’ve  lost. 

Another  project  in  the  military  is 
speech  enhancement . . .  where  we’re 
doing  some  unique  kind  of  work. 

For  example,  when  linguists  listen  in 
on  people  around  the  world,  often  the 
links  that  they  listen  to  are  rather 
noisy.  So  we’ve  had  to  work  over  the 
years  to  take  out  the  noise  in  the  sys¬ 
tems  so  the  linguist  has  a  better  shot 
at  understanding  what’s  going  on. 

Because  some  noise  gets  conducted 
through  your  body  —  through 
your  bones,  not  just  your 
eardrums  —  we’re  starting  to 
look  at  whether  we  can  do  active 
cancellation  of  noise  that  cou¬ 
ples  into  your  body  through 
your  bones.  In  the  three-to-five  year 
range,  [reducing  that  noise]  will  help 
airline  pilots,  because  it’s  really  based 
on  [current  technology],  and  it’s  just 
extending  it  to  different  frequencies 
and  power  levels. 

What  are  the  top  research  projects  on  the 
SEI’s  agenda  for  the  next  three  to  five  years? 


The  SEI  is  already  involved  in  two  of 
the  most  important  pervasive  areas  in 
software  engineering:  process  im¬ 
provement  for  software  and  system 
development,  and  network  security. 

I’m  convinced  that  increased  efforts 
in  software  architectures  could  help  in 
software  quality,  productivity  and  se¬ 
curity.  We  need  to  boost  our  efforts  in 
this  area. 

In  Department  of  Defense  systems 
and  in  commercial  systems,  we  are  in¬ 
creasingly  seeing  the  challenges  and 
difficulties  associated  with  higher  and 
higher  levels  of  integration. 

We  also  see  the  great  benefits  to 
horizontal  integration  across  systems, 
across  enterprises.  In  most  cases,  soft¬ 
ware  is  predominantly  the  glue  that 
holds  these  systems  together.  So  the 
line  between  good  software  engineer¬ 
ing  and  good  systems  engineering  is 
blurring.  SEI  has  to  work  with  the  in¬ 
dustrial  base,  the  academic  community 
and  the  government  to  improve  the 
state  of  systems  engineering  in  the 
United  States. 

There  are  other  important  areas: 
formal  validation  and  verification, 
COTS  [commercial  off-the-shelf] 
reuse,  software  supportability,  anti¬ 
tamper  technologies  for  software,  the 
growing  issues  of  wireless 
[networks]. 

I’d  also  like  to  look  at  ultra- 
secure  systems  for  certain  ap¬ 
plications  and  what  are  the 
software  implications  of  nano¬ 
systems,  advanced  robotic  systems  and 
software  in  health-related  systems,  in¬ 
cluding  prosthetics. 

What  would  you  hope  those  projects  will  lead 
to,  and  when?  My  hope  is  that  we  could 
make  significant  contributions  in  all  of 
these  areas  over  the  next  three  to  five 
years.  SEI  does  not  have  to  do  this 
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Taming  Unruly 
Systems 

A  sampler  of  SEI  projects 
that  are  under  way: 

Row-Service-Quality  Engineering 
Project  is  defining  ways  to  develop  systems 
with  shifting  boundaries  and  dsers,  uncer¬ 
tain  COTS  software,  unpredictable  failures 
and  lack  of  control. 


Function  Extraction  Project  is  exploring 

ways  to  predict  the  behavior  of  large, 
complex  programs. 

Intrusion-Aware  Design  Project  is 

defining  tools  for  identifying  and  implement¬ 
ing  system-survivability  strategies. 


Vendor  Risk  Assessment  and  Threat 
Evaluation  Project  is  developing  methods 
for  assessing  vendor  capabilities  as  indica¬ 
tors  of  product  quality. 

Rnancial  Infrastructure  Project  is 

developing  scenario-based  methods  to  im¬ 
prove  contingency  planning  and  analysis  to 
deal  with  physical  attacks  and  cyberattacks. 

COTS-based  Systems  Project  is 

developing  principles  and  practices  for 
integrating  and  evolving  systems  from 
previously  built  and  commercially  available 
components. 


work  alone.  We  do  it  in  conjunction 
with  the  broad  scientific  community  in 
the  U.S.  and  throughout  the  world. 

How  will  the  technology  for  these  projects 
get  transferred  to  the  commercial  sector? 

Since  we  work  with  the  broad  commu¬ 
nity,  improvements  and  breakthroughs 
will  transfer  based  on  their  merits. 

We  also  work  with  the  standards 
bodies  to  bring  some  consistency  to 
the  software  “battlefield,”  and  clearly 
major  governmental  sponsors  like  the 
DOD  and  the  Department  of  Home¬ 
land  Security  help  transition  some 
efforts  by  bringing  their  substantial 
weight  behind  some  efforts. 

How  will  it  help  the  corporate  IT  depart¬ 
ment?  Corporate  IT  departments  are 
an  important  market  for  software  engi¬ 
neering  technology,  even  though  these 
same  technologies  are  also  very  impor¬ 
tant  to  corporations  for  their  external 
markets.  Corporate  IT  departments 
need  quality  systems  that  are  afford¬ 
able,  sustainable,  reliable,  evolvable 
and  secure.  Isn’t  this  the  heart  of  all 
the  efforts  on  software  engineering? 

Improvements  in  the  quality  of  the 
software,  the  supportability  of  the  sys¬ 
tems  and  especially  the  security  of  cor¬ 
porate  systems  are  crucial  for  corpo¬ 
rate  IT  departments.  O  48711 
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Antivirus  Service 
Troubled  by  TLS 

Getting  Transport  Layer  Security  encryp¬ 
tion  up  and  running  is  difficult  enough 
without  having  to  migrate  it  to  work  with 
an  antivirus  service.  By  Roger  Foix 


N  my  last  column,  I  ex¬ 
plained  my  experiences 
setting  up  Transport  Layer 
Security  and  how  compli¬ 
cated  it  could  get.  Unfortu¬ 
nately,  I’ve  since  discovered 
that  it  gets  a  lot  worse. 

TLS  is  a  wonderful  protocol 
that  can  be  used  to  encrypt 
e-mail  between  two  compa¬ 
nies  very  easily.  Most  modern 
e-mail  gateway  soft¬ 
ware  comes  with  TLS 
support  built  in,  but 
there’s  a  lot  involved 
in  setting  it  up,  as  I 
discussed  last  time 
[QuickLink  48237]. 

This  week,  we’ve 
been  making  things  more 
complex  by  adding  antivirus 
services  to  the  mix. 

A  strategic  decision  was 
made  that  it  would  be  better 
to  make  sure  viruses  never 
reach  our  infrastructure,  and 
Gloucester,  England-based 
MessageLabs  Ltd.  was  chosen 
as  the  service  provider.  Nor¬ 
mally,  I’m  cynical  about  the 
abilities  of  vendors’  technical 
staffs.  But  after  working  with 
MessageLabs,  for  the  first  time 
in  years  I  can  say  I’m  im¬ 
pressed  with  a  vendor. 

Ten  Minutes  to  Trouble 

I  was  invited  to  the  initial 
meeting  with  MessageLabs 
as  an  afterthought.  My  col¬ 
leagues  thought  I  didn’t  need 
to  get  involved,  but  they  invit¬ 
ed  me  to  be  polite.  After  all, 

I  was  dealing  with  secure 
e-mail,  so  they  figured  I  might 
as  well  be  along  at  the  start 
to  agree  that  I  didn’t  need  to 
be  involved.  The  meeting 
would  take  only  10  minutes, 

I  was  told. 

Unfortunately,  I  did  need  to 


be  involved.  I  was  concerned 
about  one  throwaway  com¬ 
ment  at  the  end  of  the  Mes¬ 
sageLabs  people’s  presenta¬ 
tion.  They  were  asked,  “How 
do  we  ensure  that  all  our  e- 
mail  goes  through  your  ser¬ 
vice?”  They  answered,  “We 
just  change  your  MX  record  to 
point  to  our  servers  instead.” 

Mail  exchange,  or  MX, 

records  are  the  rout¬ 
ing  part  of  the  mail 
service:  They  tell 
the  world  which 
servers  should  han¬ 
dle  e-mail  for  a  par¬ 
ticular  domain.  By 
changing  our  MX 
record  to  point  to  its  servers, 
MessageLabs  ensures  that  all 
of  our  mail  goes  through  its 
servers,  where  it  can  be 
scanned  for  viruses. 

That’s  a  simple  and  quick 
solution.  But  by  changing  our 
MX  records,  MessageLabs  is 
suddenly  rerouting  all  our 
TLS  connections  as  well,  and 
we’ve  got  about  30  of  them. 

Technically,  this  shouldn’t 
present  a  problem.  Their 
servers  can  do  TLS,  ours  can 
do  TLS,  all  our  clients’  servers 
can  do  TLS,  and  so  it  should 
just  be  a  matter  of  making 


I’m  not  happy  that 
I’m  spending  most  of 
my  time  dealing  with 
a  project  that  was 
supposed  to  take 
10  minutes  of  my  time. 


sure  it’s  working  on  every 
server.  But  so  far,  about  95%  of 
the  project  time  is  being  spent 
dealing  with  the  little  TLS 
problems  caused  by  the  mi¬ 
gration.  The  antivirus  people 
aren’t  happy  that  their  project 
seems  to  be  getting  derailed, 
and  I’m  not  happy  that  I’m 
spending  most  of  my  time 
dealing  with  a  project  that  was 
supposed  to  take  10  minutes  of 
my  time. 

The  Big  Holdup 

Truth  be  told,  much  of  the  de¬ 
lay  is  really  my  group’s  fault: 
We  had  a  bizarrely  nonstan¬ 
dard  set  of  TLS  connections. 
Some  of  our  more  important 
clients  have  decided  to  do 
things  their  own  way,  and  we 
have  to  follow  their  lead.  As  a 
result,  all  of  our  TLS  connec¬ 
tions  seem  to  have  ended  up 
being  subtly  different:  One 
uses  strong  encryption,  one 
uses  weak;  one  uses  MX  rout¬ 
ing,  another  uses  static;  one 
does  one  type  of  authentica¬ 
tion,  another  uses  none  at  all; 
and  so  on. 

All  that  gives  us  quite  a 
complicated  TLS  environment 
that  must  be  extensively  test¬ 
ed  and  migrated  to  Message¬ 
Labs.  But  there  are  two  prob¬ 
lems.  First,  much  of  the  testing 
must  be  done  on  our  produc¬ 
tion  systems  because  our  test 
environment  isn’t  extensive. 

Second,  testing  TLS  connec¬ 
tions  on  our  clients  requires 
the  cooperation  of  our  clients’ 
IT  staffs.  We  must  deal  with  30 
IT  staffs  working  for  30  clients 
on  six  continents  in  nine  time 
zones,  with  12  sets  of  holidays 
and  eight  native  languages. 

The  tests  themselves  are 
easy  —  send  an  e-mail  to  our 
clients,  get  them  to  reply  to  it, 
and  then  quickly  check  the 
routing  to  make  sure  it  was  all 
encrypted.  But  when  you’re 
sending  an  e-mail  from  a  mail 
server  on  the  West  Coast  in 


the  U.S.  to  a  server  in  France, 
you’ve  got  to  send  the  mail  be¬ 
fore  9:30  a.m.  if  you  want  a  re¬ 
ply.  So  every  test  tends  to  take 
at  least  a  day  because  we  have 
to  wait  for  people  in  all  the 
time  zones  to  report  back. 

Then,  just  when  we’d  gotten 
it  all  working,  we  crashed  the 
production  mail  servers.  I 
won’t  go  into  exactly  how  we 
did  it  —  it  gets  embarrassing 
—  but  I  will  say  that  it  turned 
out  to  be  an  obvious  error. 

We  also  took  a  lot  of  flak 
from  our  sales  staff  about  cut¬ 
ting  off  their  e-mail  links  to 
clients.  One  sarcastic  sales¬ 
man’s  comments  hit  home.  He 
said,  “Remind  me,  isn’t  securi¬ 
ty  all  about  making  sure  that 
e-mail  keeps  working?  Doesn’t 
that  make  it  somewhat  ironic 
that  you’re  the  ones  who  are 
crashing  it?” 

It’s  always  hardest  to  deal 
with  the  truth. 

While  I’m  on  the  subject  of 
embarrassing  moments,  the 
worst  bit  about  working  with 
MessageLabs  is  that  its  people 
seem  to  know  what  they’re 
doing.  At  our  technical  meet¬ 
ings,  our  experts  spend  20 
minutes  discussing  whether 
an  idea  will  work,  whether 
we’ll  be  able  to  do  it  with  our 
software,  who’s  actually  going 
to  do  it,  and  so  on. 

Then,  when  we  ask  Mes¬ 
sageLabs,  “Can  you  do  this?” 
we  get  the  immediate  re¬ 
sponse,  “Absolutely,  no  prob¬ 
lems.”  Twenty  minutes  for  us, 
three  seconds  for  them. 

So  my  advice  for  those  of 
you  looking  to  use  TLS  with  a 
managed  antivirus  service  is 
to  make  absolutely  sure  that 
your  TLS  environment  is  as 
simple  as  possible  before  you 
try  to  migrate  it.  Better  still, 
get  the  managed  antivirus  ser¬ 
vice  in  place  before  you  set  up 
those  TLS  connections.  Be¬ 
lieve  me,  you’ll  save  yourself  a 
great  deal  of  stress.  0 

WHAT  DO  YOU  THINK? 

This  week's  journal  is  written  by  a  real 
security  manager,  “Roger  Foix,”  whose 
name  and  employer  have  been  disguised 
for  obvious  reasons.  Contact  him  at 
roger.foix@hushmail.com,  or  join  the  dis¬ 
cussion  in  our  forum:  QuickLink  a1590 

To  find  a  complete  archive  of  our 
Security  Manager's  Journals,  go  online  to 

O  computerworld.com/secjournal 


Firetrust  Releases 
MailWasherTool 


MailWasher  Server,  an  enter¬ 
prisewide  system  for  e-mail 
security  management,  is  now 
available  from  Firetrust  Ltd.  in 
Christchurch,  New  Zealand. 
The  product  is  priced  from 
$7  to  S29  per  seat  and  is  avail¬ 
able  for  Windows,  Solaris  and 
Linux  operating  systems.  Mail- 
Washer  Server’s  multilayered 
approach  identifies  spam  or 
malicious  e-mail  before  it  en¬ 
ters  a  network.  The  product 
uses  statistical  content  analy¬ 
sis  filtering,  connection  filter¬ 
ing,  policy  enforcement,  and 
blacklists  and  whitelists  to 
help  remove  spam. 


McAfee  Revises 
Policy  Orchestrator 


Santa  Clara,  Calif. -based 
McAfee  Inc.  announced  a 
new  version  of  its  ePolicy  Or¬ 
chestrator  security  event  man¬ 
agement  software.  EP0  3.5  is 
designed  to  work  with  Micro¬ 
soft  Corp.’s  Active  Directory, 
can  alert  staff  to  network 
threats  and  compliance- 
related  issues,  and  integrates 
with  McAfee’s  Entercept 
host  intrusion-prevention  soft¬ 
ware.  The  latest  version  also 
includes  a  virus-source  report¬ 
ing  feature  and  an  enhanced 
Microsoft  security  patch  as¬ 
sessment  capability. 

Alcatel  Improves 
Endpoint  Protection 

Calabasas,  Calif.-based  Alca¬ 
tel  Inc.  has  enhanced  its  Omni- 
Switch  technology  with  a  new 
capability  designed  to  help 
companies  prevent  and  con¬ 
tain  threats  to  network  end¬ 
point  devices.  The  new  func¬ 
tion  combines  OmniSwitGh’s 
virtual  LAN  capability  with 
host-integrity,  enforcement 
and  remediation  security  tech¬ 
nology  from  Sygate  Technolo¬ 
gies  Inc.  to  allow  administra¬ 
tors  to  ensure  that  all  devices 
that  connect  remotely  to  a  cor¬ 
porate  network  have  up-to- 
date  antivirus  software  and 
firewalls. 
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Sybase  Rolls  Out 
PowerBuilder  10 

Sybase  Inc.  has  announced  the 
release  of  its  Sybase  Power¬ 
Builder  10  application  develop¬ 
ment  software.  New  features 
include  Unicode  support,  en¬ 
hanced  XML  Web  DataWindow 
and  .Net  support,  and  an  Applica¬ 
tion  Refactoring  and  Object  Mod¬ 
eling  function  that  lets  program¬ 
mers  reverse-engineer  applica¬ 
tions.  PowerBuilder  10  sells  for 
$2,995;  upgrade  pricing  is  $645, 
according  to  the  Dublin,  Calif.- 
based  company. 


Certance  Launches 
Ultrium  Tape  Drives 

Certance  LLC  in  Costa  Mesa, 
Calif.,  announced  its  CL  800  LTO 
Ultrium  3  series  and  CL  400H 
LTO  Ultrium  2  series  tape  drives. 
The  CL  800  costs  $5,899,  has  a 
capacity  of  800GB  and  a  transfer 
rate  of  490GB  per  hour  and  is 
aimed  at  large  companies.  The  CL 
400H,  which  costs  $1,999  and 
has  a  400GB  capacity,  is  target¬ 
ed  at  small  to  midsize  businesses. 
The  unit  boasts  a  144GB-per- 
hour  transfer  rate  and  is  targeted 
at  small  to  midsize  businesses. 


How  does  your 
organization  view 
Hewlett-Packard’s 
Itanium  server 
road  map? 

No  plan  to  upgrade _ 

H9HMH42% 

Not  sure 

■■117% 


Plans  to  upgrade 


Has  concems/not  a  good  option 

15% 


Has  already  implemented 

il9% 


NOTE:  Margin  of  error  is  plus 
or  minus  4%. 

SOURCE:  !nterex/HP  user  group  poll 
of  350  members,  July  2004 
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Here’s  to  Your 
(Electronic)  Health 


I  HAD  MY  annual  physical  last  week,  and  there 
were  no  surprises.  The  standard  admonitions  to 
watch  my  diet  and  get  more  exercise  were  ac¬ 
companied  by  the  usual  depressing  reassurances 
that  all  of  those  little  aches,  pains  and  minor 
bodily  dysfunctions  were  merely  normal  signs  of  aging. 


Also  as  usual,  my  prima¬ 
ry  care  physician  imparted 
this  advice  and  information 
while  shuffling  through  a 
bulging  manila  folder,  look¬ 
ing  in  vain  for  notes  from 
specialists  and  test  results 
that  either  had  never  been 
sent  or  had  been  inadver¬ 
tently  tucked  into  an  EKG 
printout  from  five  years 
ago.  That  manila  folder  is 
as  close  to  a  comprehen¬ 
sive  medical  record  as  ex¬ 
ists  for  me.  And  I’m  much 
better  off  than  most  people,  since  I’ve 
been  going  to  the  same  internist  for 
20  years. 

This  country’s  medical  records  sys¬ 
tem,  or  lack  thereof,  is  just  one  of  the 
things  desperately  wrong  with  the  way 
we  deliver  health  care  in  the  U.S.  The 
good  news  is  that  the  federal  govern¬ 
ment  has  a  plan  to  use  information 
technology  to  fix  this  aspect  of  the 
medical  mess.  The  bad  news  is  that 
the  plan  will  take  so  long  and  cost  so 
much  to  execute  that  it’s  hard  to  have 
confidence  that  it  will  ever  come  to 
fruition. 

Last  month,  the  U.S.  Department  of 
Health  and  Human  Services  (HHS)  re¬ 
leased  its  10-year  road  map  for  the  cre¬ 
ation  of  a  “health  information  infra¬ 
structure.”  The  aim  is  to  create  a  con¬ 
solidated  electronic  health  record 
(EHR)  for  every  American  and  to 
build  a  nationwide  network  for  secure¬ 
ly  transporting  those  records  to  health 
care  providers. 

The  potential  benefits  of  the  system 
are  enormous.  Estimates  of  financial 
savings  resulting  from  streamlined 


health  care  administration 
and  the  elimination  of  re¬ 
dundant  care  range  as  high 
as  nearly  half  a  trillion  dol¬ 
lars  a  year. 

Beyond  monetary  con¬ 
siderations,  a  single  EHR 
for  every  citizen  would 
translate  into  improved 
care.  Access  to  more  infor¬ 
mation  means  that  doctors 
and  other  providers  will 
make  fewer  mistakes.  Di¬ 
agnoses  and  treatment 
plans  would  be  more  likely 
to  be  made  in  the  context  of  the  pa¬ 
tient’s  overall  health  and  medical  his¬ 
tory,  rather  than  just  in  response  to  in¬ 
dividual  symptoms.  In  this  case,  tech¬ 
nology  would  actually  promote  a  more 
holistic  practice  of  medicine. 

So,  if  the  potential  benefits  the 
health  information  infrastructure  are 
so  great,  why  isn’t  it  on  a  faster  track? 
A  decade  is  a  long  time  to  wait. 

Looking  beyond  the  delays  endemic 
to  political  maneuvering  and  en¬ 
trenched  bureaucracies,  the  sticking 
points  are  money  and  technology. 

While  the  system  will  lead  to  enor¬ 
mous  savings  once  it’s  implemented, 
upfront  costs  will  be  hefty,  and  the 
largest  portion  of  them  aren’t  covered 
in  the  federal  budget.  When  the  HHS 
plan  was  announced,  Mike  Kappel, 
vice  president  of  strategic  planning 
at  health  care  IT  vendor  McKesson 
Corp.,  told  Computerworld  that  its 
price  tag  could  reach  $10  billion 
[QuickLink  48367].  With  the  feds  allo¬ 
cating  just  $50  million  for  health  care 
IT  this  fiscal  year  and  $100  million 
for  next  year,  there’s  a  big  funding  gap 
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for  hospitals  and  doctors  to  fill. 

Administration  will  incur  a  big 
chunk  of  those  costs,  but  the  technolo¬ 
gy  challenges  in  the  project  are  com¬ 
plex  and  expensive.  An  EHR  is  a  virtu¬ 
al  entity,  not  a  collection  of  informa¬ 
tion  that  will  reside  in  a  single  reposi¬ 
tory.  Pieces  of  the  EHR  will  be  scat¬ 
tered  among  a  variety  of  systems, 
locations  and  media.  Authorization  to 
access  the  network  infrastructure  con¬ 
necting  them  will  be  delegated  by  the 
patient,  who  will  have  been  assigned  a 
cradle-to-grave  ID  number  and  be  re¬ 
quired  to  use  two  forms  of  authentica¬ 
tion,  such  as  a  security  token  and  a 
thumbprint.  $ingle  sign-on  capability 
will  be  crucial  for  providers,  if  the  sys¬ 
tem  is  to  succeed  at  its  main  mission: 
making  it  easier  for  them  to  get  a  pa¬ 
tient’s  complete  history. 

The  EHR  system  will  have  to  main¬ 
tain  a  complete  audit  trail,  tracking 
who  accessed  a  patient’s  record  and 
when.  Electronic  document  manage¬ 
ment  and  workflow  tools  must  be  inte¬ 
grated  into  the  system,  and  providers 
will  need  to  secure  plenty  of  band¬ 
width  to  move  images  —  digitized 
X-rays  and  CT  and  MRI  scans  and 
so  on  —  around  the  network. 

There  are  standards  battles  and 
certification  skirmishes  to  be  fought. 
Vendors  have  lots  of  work  to  do,  most 
critically  on  their  software  interfaces. 
Interoperability  is  what  the  project  is 
about.  And  nobody  knows  how  long 
funding  will  last,  or  if  the  powers  that 
be  will,  as  they  say  in  Washington,  stay 
the  course  on  the  project. 

But  despite  the  complexity  and  un¬ 
certainty,  few  federal  projects  in  re¬ 
cent  memory  have  been  as  worthwhile 
as  this  one  is.  Who  knows,  if  the  U.S. 
can  provide  EHRs  for  each  of  its  citi¬ 
zens,  someday  it  might  be  able  to  give 
them  all  access  to  health  care  as  well. 
©  48627 
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Great  hospital  safety  systems  are  all  about 
getting  the  basics  right  -  and  knowing  what 
motivates  doctors.  BY  CJ  RHOADS 


When  cio  john  hummel  tried  to  comput¬ 
erize  the  way  doctors  write  prescriptions 
for  patients  at  Sutter  Health,  a  network  of 
26  California  hospitals,  he  came  smack 
up  against  an  immovable  obstacle:  physi¬ 
cian  resistance. 

“We  tried  to  implement  computer  physician  order 
entry  four  or  five  different  ways,”  says  Hummel.  “We 
tried  four  different  vendors.  We  tried  PCs,  tablets 
and  PDAs.”  In  every  case,  technology  slowed  the 
process  for  the  physicians.  A  prescription  that  took 
five  seconds  to  order  on  paper  took  two  to  three 
minutes  on  the  system.  The  doctors  were  frustrated 
over  the  crippling  effect  on  their  productivity,  Hum¬ 
mel  says. 

The  result:  “Even  with  the  [improved]  system  we 
finally  implemented,  it  takes  about  a  year  for  a  physi¬ 
cian  to  recover  to  90%  of  their  original  productivity,” 
he  explains,  and  less  than  20%  of  the  doctors  use  it.  “I 
would  have  to  label  the  attempt  a  resounding  failure.” 

User  resistance  is  nothing  new  in  IT  projects,  but 
in  a  hospital  setting,  the  stakes  are  higher,  and  life¬ 
saving  projects  can  be  doomed  by  recalcitrant  doc¬ 
tors.  Still,  user  opposition  is  justified  if  new  safety 
systems  steal  precious  time  and  disrupt  workflow. 


The  best  way  to  win  doctors  over  is  to  follow  the 
same  rules  that  guide  any  good  IT  system  implemen¬ 
tation:  Start  with  strong  executive  support  and  realis¬ 
tic  expectations;  understand  your  processes  and  how 
the  system  will  affect  them;  anchor  the  system  with 
an  efficient,  bug-free  back  end;  build  a  user-friendly 
front  end;  find  committed  users  to  lure  in  the  rest; 
and  provide  good  technical  support.  But  most  impor¬ 
tant,  understand  what  really  motivates  your  users. 

Failed  Front  Ends 

Hospital  safety  systems  are  doomed  to  fail  if  the 
physician-facing  front  end  isn’t  tied  to  an  efficient 
and  responsive  back  end,  and  the  back  end  needs  to 
be  built  first,  says  Chris  Giglio,  director  of  the  Accel¬ 
erated  Solutions  Center  at  Cerner  Corp.,  a  Kansas 
City,  Mo.-based  vendor  of  hospital  automation  sys¬ 
tems.  “The  physician  changes  should  be  implement¬ 
ed  last,”  he  says.  The  system  must  have  a  flawless 
workflow  before  it’s  put  in  physicians’  hands  so  that 
the  effect  on  them  is  minimized. 

Jayashree  Raman,  CIO  at  The  Reading  Hospital 
and  Medical  Center  in  Pennsylvania,  is  following  that 
order.  Last  year,  she  installed  a  back-end  medication 
administration  records  (MAR)  system,  which  en¬ 
ables  clinicians  to  match  a  patient’s  bar  code  to  the 
bar  code  on  a  prescription  drug  before  it’s  adminis¬ 
tered.  “The  MAR  is  designed  to  ensure  the  five 
rights:  right  patient,  right  drug,  right  time,  right 
dosage,  right  route,”  Raman  explains. 

She  also  plans  to  implement  a  computerized  physi¬ 
cian  order  entry  (CPOE)  system,  but  that  will  take 
time.  “It  is  a  complicated  project  affecting  multiple 
departments,”  Raman  says.  “We  are  working  through 
the  process  issues  and  anticipate  having  a  working 
model  in  the  next  few  months.” 

Tomorrow  wouldn’t  be  soon  enough  for  Terrence 
Cescon,  a  doctor  at  Berks  Hematology-Oncology 
Associates  Ltd.,  who  works  with  Reading.  “Reading 
Hospital  is  in  the  Stone  Age,”  says  Cescon,  who 
trained  at  Hahnemann  University  Hospital  Inc.  in 
Philadelphia,  where  a  CPOE  system  had  already  been 
implemented.  Because  he’s  familiar  with  the  technol¬ 
ogy,  ordering  a  prescription  online  is  quicker  for  him 
than  writing  it  by  hand,  he  says. 

Back-End  Basics 

But  Hummel  maintains  that  the  back-end  MAR  sys¬ 
tems  are  even  more  important  than  the  front-end 
physician  systems. 

“It’s  popular  to  point  the  finger  at  doctors’  horrible 
handwriting,”  he  says,  referring  to  the  1999  Institute 
of  Medicine  report  that  estimated  that  as  many  as 
98,000  patients  die  each  year  as  a  result  of  prevent¬ 
able  medical  errors  in  hospitals.  But  more  recent 
studies  have  shown  that  only  13%  of  the  errors  are 
due  to  poor  handwriting,  he  says.  Eleven  percent  are 
introduced  at  the  pharmacy,  and  a  full  50%  of  the  er¬ 
rors  are  made  at  the  bedside. 

“You  can  spend  millions  trying  to  avoid  a  physi¬ 
cian’s  handwriting,  but  it  won’t  make  that  much  dif¬ 
ference,”  he  says.  “Hospitals  can  make  a  much  bigger 
impact  with  bar  coding.” 

Even  so,  MAR  systems  alone  aren’t  good  enough, 
says  Claire  Turner,  director  of  communications 
for  The  Leapfrog  Group,  a  Washington-based  con¬ 
sortium  of  companies  that  provide  health  care  to 


35  million  Americans.  “Implementing  only  the  back¬ 
end  process  doesn’t  deal  with  the  real  issue,”  she 
says.  “The  earlier  in  the  process  you  catch  the  errors, 
the  better.” 

Turner  compares  a  fully  automated  electronic 
health  record  system  (which  includes  both  CPOE 
and  MAR)  to  safety  systems  in  a  car.  “We  need  a  seat 
belt,  an  airbag  and  antilock  brakes,”  she  says. 

John  Glaser  has  had  experience  at  both  ends.  At 
Partners  Healthcare  System  Inc.,  a  nonprofit  network 
of  10  hospitals  in  the  Boston  area,  he’s  implementing 
CPOE  systems  at  several  of  his  teaching  hospitals. 

“It’s  a  bear  —  very  complicated,  highly  invasive  of 
workflow,  constantly  encountering  challenges,”  he 


DIFFERENT  PLAYERS, 

SAME  GAME 


CIOs  and  specialists  who  have  implemented  hospital 
safety  systems  say  that  while  the  players  are  different 
and  the  stakes  are  higher  than  for  other  IT  projects, 
most  of  the  success  factors  are  similar. 

DRIVE  the  project  from  the  operational  area  of  the 
hospital,  not  IT. 

USE  a  multidisciplinary  team  that  includes  doctors 
and  nurses  to  design  the  process. 

6ET  buy-in  from  all  stakeholders,  especially  top 
management  and  the  top  doctor  in  each  department. 
Forcing  a  system  on  clinicians  who  don’t  see  the 
benefits  is  a  prescription  for  failure. 

KEEP  all  stakeholders  informed  throughout  the 
process.  Clinicians  often  don’t  have  offices  and  don’t 
check  e-mail,  so  devise  special  methods  of  keeping 
them  up  to  date. 

ENLIST  the  nurses  and  other  practitioners  early  and 
use  their  feedback  to  improve  the  process  before 
attempting  to  convert  the  physicians. 

PROVIDE  good  support  and  resolve  problems  quick¬ 
ly.  Have  people  on-site  during  the  rollout  phases  - 
especially  when  physicians  are  involved. 

MAKE  SURE  the  system  is  ultrareliable.  Keep  anti¬ 
virus  software  up  to  date  and  fully  test  all  patches 
before  implementing  them.  A  computer  virus  isn’t 
normally  a  life-or-death  matter  -  unless  the  computer 
is  monitoring  someone’s  life  support. 

SET  the  proper  expectations  for  the  project.  Don't  try 
to  do  too  much  too  soon,  and  explain  about  trade¬ 
offs,  such  as  time  versus  access  to  information. 

FOCUS  on  measurable  quality  and  safety  goals  that 
relate  to  saving  lives.  Don't  focus  on  financials  or 
expect  the  system  to  save  money. 

-CJ  Rhoads 


says.  But  unlike  Hummel,  he  doesn’t  use  the  term 
failure.  “No  project  is  a  complete  success  or  a  com¬ 
plete  failure,”  he  says.  “It’s  a  matter  of  degrees.  All 
projects  have  problems.” 

For  example,  Glaser  tells  of  rocky  times  during  a  pi¬ 
lot  of  an  MAR  project.  “The  wireless  PDAs  and  the  net¬ 
work  were  flaky;  they  just  didn’t  work  reliably,”  he  says. 
“Plus,  we  didn’t  really  think  through  the  workflow.” 

Workflow  Reworked 

Workflow  problems  can  sabotage  a  hospital  safety 
system  because  doctors  won’t  stand  for  the  disrup¬ 
tion.  “If  you  do  it  right,  implementing  a  whole  system 
is  like  ripping  out  the  backbone  of  a  hospital  and  re¬ 
placing  it,”  says  Paul  Ruflin,  CEO  of  Eclipsys  Corp.,  a 
provider  of  hospital  medical  record  software  in  Boca 
Raton,  Fla.  “It  is  pervasive  technology.” 

“The  challenge  is  redesigning  the  entire  work- 
flow,”  says  Jacque  Dailey,  CIO  at  Children’s  Hospital 
of  Pittsburgh.  “Success  is  based  upon  process  im¬ 
provement,  not  the  technology.” 

And  process  improvement  requires  strong  support 
—  from  both  executives  and  IT.  Dennis  Baker,  CIO 
at  Sarasota  Memorial  Hospital,  a  community  hospital 
in  Florida,  has  been  learning  about  that  since  1999, 
when  he  implemented  a  CPOE  system  without 
enough  support  from  either  group.  “For  years,  we 
only  had  25%  of  the  orders  placed  online,”  he  says. 

Executive  backing,  although  belated,  made  all  the 
difference.  “We  finally  got  the  CEO  involved,”  Baker 
says.  The  CEO  sent  a  letter  to  all  the  physicians, 
mandating  the  use  of  the  system  within  a  year.  “Now 
we  are  proceeding  floor  by  floor  with  extra  support 
for  the  clinicians  using  it,”  he  says.  “We  are  up  to  50% 
and  expect  to  get  to  80%  by  the  end  of  the  year.” 

Although  automated  hospital  systems  are  expen¬ 
sive  and  disruptive  and  doctors  complain  about  lost 
productivity  in  the  early  phases,  helping  everyone 
focus  on  the  big  picture  can  improve  the  outcome. 
“You  have  to  do  this  for  the  right  reasons,”  Hummel 
says,  “and  return  on  investment  isn’t  one  of  them.” 

Hummel  says  that  motivation  can  make  all  the  dif¬ 
ference  in  physicians’  acceptance  of  a  new  system, 
recalling  a  project  designed  to  ensure  that  specially 
trained  doctors  called  intensivists  monitor  critical- 
care  unit  patients.  “We  implemented  a  video  system 
so  that  intensivists  can  monitor  50  beds  at  a  time  in¬ 
stead  of  10,”  Hummel  explains. 

Because  there  are  only  a  few  intensivists  available, 
they  were  thrilled  to  be  able  to  monitor  more  people 
during  each  shift.  “We  decreased  fatalities  by  25%, ” 
he  says.  “We  proved  that  it  works.  The  cost  is  over 
$5,000  per  bed  per  month,  but  we  saved  lives.” 

Jocelyn  Benes,  vice  president  of  quality  control 
at  Children’s  Hospital  of  Pittsburgh,  says  that  when 
the  hospital  implemented  a  CPOE  system,  “we  didn’t 
even  measure  financial  benefits.  Our  focus  on  quali¬ 
ty  was  one  of  the  reasons  we  were  successful.” 

Benes  says  that  appealing  to  users’  dedication  to  the 
job  is  the  key  to  getting  their  buy-in.  “Clinicians  are 
more  receptive  to  doing  what’s  best  for  the  patient 
than  they  are  to  saving  money,”  she  explains.  “We 
were  successful  in  decreasing  errors,  and  that’s  all 
that  mattered  to  the  patients  and  the  staff.”  ©  48395 

Rhoads  is  a  freelance  writer  in  the  Philadelphia  area. 
Contact  her  at  CJRhoads@ETMAssociates.com. 
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IT  SURVIVAL 


RETIRING  CIO  PAUL  INGEVALDSON 
OFFERS  10  TIPS  FOR  SURVIVING  - 
AND  PROSPERING  -  IN  THE  IT  JUNGLE. 


DEAR  COLLEAGUES: 


and  life-changing  systems. 


I’ve  been  in  IT  for  40  years,  and  I  plan 
to  retire  at  the  end  of  this  year.  Yes,  I’m 
retiring  as  the  CIO,  and  I’m  not  being 
downsized,  forcibly  replaced  or  fired. 
I’ve  been  at  my  current  company, 

Ace  Hardware  Corp.,  for  25 
years.  That’s  a  long  time  in 
this  day  and  age  of  the  port¬ 
able  CIO.  In  fact,  Computer- 
world.com  reported  Dec.  22  that  the 
average  CIO  tenure  is  18  to  36  months. 

Over  the  past  40  years  in  technology, 
I’ve  developed  some  practices  that  have 
served  me  well.  Perhaps  they  can  also 
help  you  survive  in  the  treacherous 
world  of  IT.  So  here  are  Ingevaldson’s 
top  10  ways  to  survive  the  IT  jungle: 

W  Don’t  be  afraid  to  leave  IT.  It’s  a 
great  experience,  and  you’ll 
probably  come  back.  And  you 
will  come  back  as  a  more  well-rounded 
executive.  You  will  also  experience  IT 
from  the  outside  in  and  better  under¬ 
stand  people’s  true  feelings  about  IT 
within  the  corporation. 

And  there  is  nothing  more  fun  and 
more  daunting  than  trying  to  make  the 
revenue  line.  Most  of  us  manage  ex¬ 
penses  well,  but  that  revenue  line  is 
really  a  challenge.  Believe  me,  you  will 
gain  renewed  respect  for  your  users. 

Don’t  keep  IT  in  the  closet.  Spread 
the  word,  create  excitement  and 
convince  people  to  get  on  the  IT 
bandwagon.  We  are  in  a  very  exciting, 
dynamic  profession  that  is  changing 
the  life  of  everyone  on  the  planet.  You 
may  sometimes  think  we  are  selling 
reports  and  screens,  but  remember: 
We’re  creating  business-changing 


8  Never  think  you  know  it  all,  because 
you  don’t.  But  even  if  you  do,  it 
will  change.  Read  voraciously, 
and  know  what’s  going  on.  Read  out¬ 
side  of  your  expertise  so  you  can  see 
the  world  on  a  bit  larger 
stage.  I  love  Harvard  Busi¬ 
ness  Review,  The  Economist 
and  MIT  Technology  Re¬ 
view,  along  with  all  the  other  tech¬ 
nology  magazines  and  newspapers. 


7  Understand  the  corporate  strategy  and 
mobilize  IT  to  support  it.  Be  sure 
you’re  part  of  the  process,  not  just 
the  implementer.  This  is  a  high  priori¬ 
ty,  and  you  must  make  yourself  neces¬ 
sary  in  the  strategy  meetings.  This 
requires  that  you  think  in  company 
terms,  not  IT  terms.  This  is  really  a 
stretch  for  some  of  us,  and  it’s  where 
the  rubber  meets  the  road. 

6  Develop  a  “cheap”  image.  For  some 
of  us,  especially  a  Norwegian 
like  me,  this  is  easy.  IT  is  an  ex¬ 
pensive,  misunderstood  area  that  is 
clouded  by  mistrust  and  arcane  con¬ 
cepts.  The  last  thing  you  need  to  do 
is  flaunt  your  image  and  act  like  a 
know-it-all  IT  savant.  Get  rid  of  the 
Armanis  and  the  pinkie  rings.  Be 
down  to  earth  and  talk  business-speak, 
not  IT-speak. 

5  Don’t  overmanage  IT  personnel.  Our 

business  is  exciting  and  self- 
motivating.  Provide  the  proper 
tools  and  environment,  set  the  right 
strategy,  and  get  out  of  the  way.  Re¬ 
member  when  you  were  a  program¬ 
mer,  and  how  the  worst  thing  was  to 


have  someone  looking  over  your 
shoulder. 

4  Expect  your  people  to  make  dates  and 
budgets  on  projects.  Do  this  by  man¬ 
aging  the  lock-in  dates  for  both 
and  by  minimizing  specification  creep. 
Missed  deadlines  and  busted  budgets 
give  IT  a  bad  name,  and  they  are  often 
caused  by  uninvolved  users.  Be  sure  — 
no,  demand  —  that  you  have  user  in¬ 
volvement  in  projects.  Be  strong  and 
vigilant.  Sure,  some  projects  will  go 
over,  but  that  should  be  the  exception, 
not  the  rule. 

3  Don’t  charge  out  IT.  Operate  it  as 
an  expense  center.  I  feel  very 
strongly  that  the  need  to  charge 
out  is  an  indication  that  the  company 
doesn’t  support  IT.  If  you  have  a  proc¬ 
ess  where  top  executives  make  the  pri¬ 
oritization  decisions,  then  IT  is  work¬ 
ing  on  the  important  applications. 
There  is  no  need  to  charge  out. 

If  you  decide  to  charge  out  and  thus 
operate  IT  like  a  utility,  then  it  will 
never  be  strategic.  Nicholas  Carr  will 
be  right  [QuickLink  37990].  Having 
electricity  in  the  wall  won’t  give  you 
a  strategic  advantage.  It’s  just  a  cost 
of  entry  into  the  game.  Besides,  the 
charge-out  system  is  a  big  system  that 
requires  a  huge  amount  of  processing 


time  and  data  input,  and  it  results  in 
much  disagreement  with  the  very 
users  we  are  trying  to  nurture. 

2  Learn  to  delegate.  If  you’re  answer¬ 
ing  too  many  easy  questions, 
you’re  not  delegating  enough. 
Sure,  it  makes  you  feel  good  that  you 
still  know  the  answers,  and  that  is  a  big 
thing  for  an  ITer.  If  you  delegate  the 
easy  ones  and  get  only  the  hard  ones, 
you’ll  have  a  tougher  day,  but  your 
people  will  feel  more  engaged  and  the 
department  will  move  faster.  Besides, 
tough  days  are  why  they  invented  sin¬ 
gle  malts. 

1  Force  IT  onto  the  plate  of  all  senior  exec¬ 
utives.  They  can  handle  it.  It’s  part 
of  their  job,  just  like  finance,  mar¬ 
keting  and  all  the  other  major  depart¬ 
ments.  Just  mention  that  you  spend  be¬ 
tween  1%  and  7%  of  corporate  revenue 
and  you  want  to  get  them  more  in¬ 
volved.  What  are  they  going  to  say? 
You’ll  be  surprised  by  how  much  they 
really  want  to  understand  technology. 

That’s  my  list.  It  has  helped  me 
avoid  some  of  the  pitfalls  that  are  out 
there,  and  I  hope  it  helps  you.  Good 
luck  and  have  fun.  You’re  in  a  great 
business.  O  48479 

—  Paul  Ingevaldson 


Lunc 


Open-source  software  comes  with 
rights  and  obligations.  Here’s  what  that 
license  is  really  all  about. 


Nothing  in  life  is  really  free,  says  Larry  Rosen, 

and  that  includes  open-source  software.  As  open- 
source  gains  traction  in  business,  it’s  increasingly  im¬ 
portant  to  understand  the  licenses  under  which  it’s 
used.  Rosen,  who  formerly  taught  programming  and 
database  design  at  Stanford  University,  is  also  a  found¬ 
ing  partner  of  Rosenlaw  &  Einschlag,  a  technology  law 
firm  in  Los  Altos  Hills  and  Ukiah,  Calif,  and  the  author 
of  Open  Source  Licensing:  Software  Freedom  and 
Intellectual  Property  Law  (Prentice  Hall  PTR,  2004). 
He  talked  with  Computerworld’s  Kathleen  Melymuka 
about  rights  and  obligations  under  open-source. 

As  an  IT  manager,  why  do  I  need  to  know  or  care  about  open- 
source  licensing?  Because  you  or  your  company  is,  or 
soon  will  be,  using  open-source  software. 

I  never  realized  that  licensing  was  even  an  issue  in  open- 
source.  Why  do  I  need  a  license  for  something  that’s  free? 

Because  of  the  problem  with  the  word  free. 

It  means  too  many  different  things  in  the 
language.  Birds  are  free  to  fly.  Is  open- 
source  software  free  in  that  sense? 

Then  what  does  it  mean?  It  means  you  are  giv¬ 
en  the  freedom  to  do  certain  things  with 
the  software  —  things  like  use  it,  copy  it, 
change  it,  combine  it  with  other  stuff.  Be¬ 
cause  of  that,  what’s  important  is  the  license 
under  which  those  freedoms  are  protected. 

What  are  the  key  things  to  look  for  in  an  open-source  license? 

What  you  need  to  look  for  is  “What  am  I  being  li¬ 
censed  to  do?”  and  “What  are  the  conditions  that  I’m 
accepting  when  I  take  that  license?”  And  therein  lies 
a  tale. 

Are  there  any  deal-breakers  I  need  to  really  watch  out  for? 

What  you  need  to  look  out  for  is  what  you  give  up. 
What  are  the  conditions,  because  nothing  is  really 
free  in  life.  What  you  have  to  give  up  can  be  expen¬ 
sive.  It  depends  on  the  license.  You  may  have  an  oblig¬ 
ation  to  expose  your  own  source  code,  take  a  risk,  dis¬ 
tribute  it  under  the  same  license.  It’s  not  just  free. 


Can  you  give  me  an  example  of  something  that  might  catch 
a  company  by  surprise?  The  one  that  most  people  are 
concerned  about  is  if  you  create  a  derivative  work 
and  distribute  it,  you’re  required  to  disclose  your 
changes  and  distribute  it  under  the  same  [open- 
source]  license. 

Then  I  can’t  use  open-source  and  customize  my  own  soft¬ 
ware?  You  can.  For  internal  uses,  it’s  your  business. 
But  if  you  choose  to  share  it  with  some  other  compa¬ 
ny,  your  obligation  under  some  licenses  is  to  make  it 
available  under  the  same  license. 

So  I  can’t  sell  it?  No.  That’s  what  people  think.  You  can 
try  to  sell  it,  but  if  you’re  required  to  distribute  it  un¬ 
der  the  same  license,  that  license  allows  people  to 
make  copies  for  free,  so  you  have  to  tell  them  they 
can  also  have  it  for  free. 


What  is  the  General  Public  License  and  why 
should  I  care?  The  GPL  is  the  archetype,  the 
first  and  best  and  most  popular  and  most 
influential  of  all  open-source  licenses.  It  is 
the  license  under  which  Linux  is  distrib¬ 
uted  and  many  other  software  packages 
that  are  extremely  important  in  open- 
source.  About  70%  of  all  open-source  is 
licensed  under  the  GPL.  So  it’s  important 
to  understand  it  and  its  legal  effects,  its 
strengths  and  its  weaknesses. 


Your  book  has  a  section  on  litigation.  Why  would  anyone  sue 
over  free  software?  People  sue  over  intellectual  property 
because  it  is  property  and  because  the  stakes  are  so 
high  and  because  the  legal  constructs  are  not  black 
and  white,  and  so  licenses  get  interpreted  and  side 
agreements  get  made  between  companies.  Lawsuits 
are  usually  by  people  who  don’t  want  it  to  be  free  — 
who  want  to  lock  it  back  up  again.  As  open-source  be¬ 
comes  successful,  people  are  going  to  want  to  try  to 
make  it  proprietary,  to  claim  ownership  over  things 
they  don’t  have  rights  to.  People  will  sue  over  what 
they  have  sued  about  since  the  first  case:  money  and 
property.  O  48482 


intellectual 
Droperty 

There  is  much  more  to  software  than  the  disk  it 
comes  on.  As  one  California  court  wrote  in  1948, 
property  is  a  very  broad  concept  that  includes  not 
only  the  tangible  but  also  “every  intangible  benefit 
and  prerogative  susceptible  of  possession  or  disposi¬ 
tion.”  Computer  software  is  this  kind  of  intangible 
property  because,  under  the  law,  it  comes  with  spe¬ 
cific  but  intangible  benefits  and  prerogatives  that  can 
be  separately  owned  and  disposed  of. 

Software  is  a  product  of  human  intellect,  and 
therefore  it  is  a  kind  of  intellectual  property.  Intellec¬ 
tual  property  is  a  valuable  property  interest,  and  the 
law  allows  its  owner  to  possess  and  control  it.  The 
programmer  who  writes  software  -  or  the  company 
that  hires  that  person  to  write  software  -  is  deemed 
to  be  the  first  owner  of  intellectual  property  embod¬ 
ied  in  that  software.  That  owner  may  exercise  domin¬ 
ion  over  that  intellectual  property.  He  can  give  it 
away,  sell  it  or  license  others  to  use  it.  That  owner 
has  the  prerogative  to  create  copies  of  the  intellectu¬ 
al  property,  and  he  or  she  may  prevent  others  from 
making,  using  or  selling  those  copies. 

Because  of  these  partly  tangible  and  partly  intan¬ 
gible  aspects  of  computer  software,  it  is  possible  to 
have  different  owners  own  (1)  a  tangible  copy  of  soft¬ 
ware  purchased  at  a  computer  store  or  downloaded 
from  a  Web  site,  and  (2)  the  intellectual  property  em¬ 
bodied  in  that  software. 

Never  confuse  these  two  aspects  of  intellectual 
property,  for  the  laws  apply  differently  to  each. 

Excerpted  with  permission  from  Open  Source 
Licensing:  Software  Freedom  and  Intellectual 
Property  Law.  Copyright  2005  Lawrence 
Rosen  (Prentice  Hall  PTR,  2004). 
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CLOSE-UP:  IT  Project  Leaders 


Which  has  the  most  effect 
on  the  motivation  of  software 
project  team  members? 


Team  peers - 

Project  manager - 

—  Team  leader 

-  Team  members’  technical  ability 
- Senior  management 


In  your  organization, 
how  are  team  leaders 
usually  selected? 


By  personal  relationships  - 

By  training^ - 

By  technical  acumen  — 
—  By  leadership  skills 

- Don’t  know 


BASE:  Software  project  teams  from  more  than  250  development  organizations 
SOURCE:  Cutter  Consortium,  Arlington,  Mass.,  2004 
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Grooming  Next-Gen  IT  Pros 


In  a  2004  IBM  survey  of  450  global 
CEOs,  75%  cited  education  and  a 
lack  of  qualified  candidates  as  the 
issues  that  will  have  the  greatest 
effect  on  their  businesses  over  the 
next  three  years. 

IBM  is  aiming  to  better  prepare 
graduates  for  tomorrow’s  IT  jobs  by 
providing  colleges  and  universities 
with  a  wide  range  of  education  bene¬ 
fits  and  programs  designed  to  teach 
students  open  standards  skills.  In  ad¬ 
dition  to  offering  40  software  pro¬ 
grams  free  of  charge  through  a  Web- 
based  portal,  the  company  is  offering 
educators  a  special  rate  on  hardware. 
Under  the  new  IBM  Academic  Initia¬ 
tive,  th8  vendor  will  also  assign  tech¬ 


nical  teams  to  various  universities  to 
assess  their  IT  curricula  and  provide 
special  training  and  skills  transfer  for 
faculty  and  staff. 

Universities  participating  in  the 
pilot  program  include  the  University  of 
Houston-Clear  Lake,  Indiana  State 
University,  Worcester  Polytechnic  In¬ 
stitute  and  Universidade  de  Brasilia. 
IBM  says  it  developed  the  program  in 
response  to  the  need  for  IT  profes¬ 
sionals  with  skills  in  open-standards- 
based  products.  Linux,  for  example,  is 
the  fastest-growing  operating  system, 
according  to  IDC.  Java,  meanwhile,  is 
used  by  more  than  70%  of  all  enter¬ 
prises,  according  to  Gartner  Inc. 

-  Julia  King 


ASK  AN  IT  LEADER 

Roy  E.  Lowrance 

TITLE  Chief 
technology  officer 

COMPANY:  Capital 
One  Financial  Corp., 
McLean,  Va. 

I  - 

AO  A  Lowrance  is  this 
IlfifA  month’s  guest 
”  Premier  100  IT 

Leader,  answering  readers’  ques¬ 
tions  about  job  skills  and  career 
strategies.  If  you  have  a  question 
you’d  like  to  pose  to  one  of  our 
Premier  100  IT  Leaders,  send  it  to 
askaleader@computerworld.com 
and  watch  for  this  column  in  print 
and  online. 


I  am  currently  a  junior  in  college,  focused 
on  networking.  But  my  school  isn’t  very 
strong  in  that  field.  What  can  I  do  on  my 
own  to  develop  skills  that  will  make  me 
competitive  with  students  from  other 
schools?  There  are  many  things  you  can  do 
to  make  yourself  more  marketable.  First  of  all, 
make  sure  you  take  advantage  of  every  oppor¬ 
tunity  to  get  a  well-rounded  education.  Having 
strong  expertise  in  one  or  more  specialized  ar¬ 
eas  is  important,  but  most  employers  are  inter¬ 
ested  in  candidates  with  diverse  skills  and 
knowledge  in  many  different  fields. 

In  addition  to  technology  courses,  take 
classes  that  will  help  you  develop  strategic  and 
critical  thinking  skills.  If  you  can  think  strategi¬ 
cally  and  understand  business  issues,  you  will 
be  better  able  to  position  yourself  as  a  valued 
technology  resource  rather  than  just  a  com¬ 
modity.  To  develop  your  networking  skills,  keep 
current  with  the  latest  trends  by  reading  books 
and  trade  journals  and  utilizing  Internet  re¬ 
sources.  Also,  look  for  opportunities  to  apply 
and  expand  your  technology  experience 
through  part-time  work,  internships  or  even 


volunteer  work.  If  you  are  fairly  certain  you 
want  to  pursue  a  career  in  networking,  you 
might  want  to  consider  transferring  to  a  school 
that  has  a  strong  reputation  in  that  field. 

How  can  I  exploit  my  in-depth  knowledge 
of  both  software  engineering  and  bio¬ 
technology  while  hedging  bets  against 
job  outsourcing?  Combining  a  specialty 
(such  as  software  engineering)  with  in-depth 
knowledge  of  a  growth  industry  (like  biotech¬ 
nology)  is  a  great  strategy.  To  enhance  your 
marketability,  keep  up  with  innovation  in  both 
your  specialty  and  industry.  In  addition,  look  for 
ways  to  provide  unique  value  to  your  future  em¬ 
ployer.  This  requires  keeping  current  with 
what’s  happening  in  the  IT  marketplace  so  you 
don’t  find  yourself  in  a  role  that  is  viewed  as  a 
commodity.  At  Capital  One,  we  choose  soft¬ 
ware  engineers/architects  who  can  take  a 
strategic  view  of  not  only  the  IT  organization, 
but  also  the  company  as  a  whole.  The  wider 
view  enables  them  to  create  better  architec¬ 
tures  and  better  systems  for  the  company. 

Should  I  plan  to  leverage  the  portfolio  of 
white  papers,  audits,  analyses  and  case 
studies  I  have  created  in  my  career  when 
interviewing  for  a  director  or  CIO  posi¬ 
tion?  Some  argue  that  writing  skills  are 
irrelevant  to  the  CIO  position  because 
verbal  and  leadership  skills  are  more  im¬ 
portant.  Strong  writing  skills  are  valuable  re¬ 
gardless  what  career  path  one  takes.  Effective 
leadership  requires  being  able  to  convey  infor¬ 
mation  and  strategies  to  people  in  a  clear,  con¬ 
cise  and  persuasive  manner,  whether  verbally 
or  in  writing.  A  strong  portfolio  that  demon¬ 
strates  your  ability  to  communicate  effectively 
through  a  variety  of  writing  styles  will  make  a 
favorable  impression  on  most  hiring  managers. 

More  and  more,  business  leaders  are  looking 
for  IT  professionals  who  can  be  strategic 
thinkers  and  truly  understand  the  nuts  and  bolts 
of  business  dynamics.  Being  able  to  demon¬ 
strate  your  strengths  in  writing  is  an  added  tool 
in  your  arsenal.  Don’t  forget  to  make  sure  your 
rdsumd  casts  you  in  the  best  light.  ©  48706 


Staying  Power 

Is  the  retention  of  your  IT  staff 
becoming  more  or  less  important 
as  the  economy  improves? 

BASE:  1,400  CIOs  at  U.S.  companies 
SOURCE:  Robert  Half  Technology, 

Menlo  Park,  Calif.,  July  2004 
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QUICK  HITS 


IT  GOVERNANCE 


How  would  you  describe 
your  IT  organization? 


Base:  867  IT  decision-makers  at 
North  American  companies 


In  mixed  organizations,  which 
IT  activities  report  primarily  to 
business  units  rather  than  to  IT? 


Business  analysis  and  process  expertise 

■■■■45% 

Project  management 

Application  maintenance  and  support 

■■■■34% 

Application  development 

■■■i  32% 

Helpdesk 

■■19% 

Networking  and  telecommunications 

18% 

Architecture 

|6% 

Database  operations 

1 5% 

Base:  309  IT  decision-makers  at  North 
American  and  European  companies. 
Multiple  responses  allowed. 


To  whom  does  the  CIO  or  senior 
IT  decision-maker  report? 
NORTH  AMERICA 

CEO  CFO 


Senior 
exec — • 
from  other 
business 
unit:  5% 


Other:  9% 


President, 
COO  or  other 
operations  exec 

Board  of  directors/ 
owner:  1% 


EUROPE 


Senior 
exec 
from  other 
business 
unit:  8% 


Other:  8% 


COO  or 
other 
operations 
exec 

Board  of  directors/owner:  6% 


Base:  1,263  IT  decision-makers  at  North 
American  and  European  companies.  (Percent¬ 
ages  may  not  total  100  because  of  rounding.) 
Source:  Forrester  Research  Inc., 
Cambridge.  Mass.,  July  2004. 


EDWARD  SMITH 


The  Changing  Face  of 
Information  Security 


ACKING,  CRACKING,  global  worms  and 
viruses,  netspionage,  social  engineering, 
internal  theft,  employees  with  malicious 
intent,  physical  terrorism  and  cyber¬ 
terrorism  —  these  are  just  some  of  the 


security  challenges  organi¬ 
zations  face.  All  the  ways 
we  have  allowed  data  to  be 
shared  have  made  unde¬ 
tected  theft  of  sensitive  in¬ 
formation  exponentially 
easier.  While  efforts  to  ex¬ 
tend  data  to  the  edge  of  the 
organization  for  productiv¬ 
ity’s  sake  have  succeeded 
beyond  our  expectations, 
attempts  to  secure  that  data 
have  failed  miserably. 

We  are  starting  to  realize 
that  information  security  is 
a  process  in  support  of  the 
organization,  requiring  an 
understanding  of  the  forces  that  drive 
business  both  internally  and  external¬ 
ly.  A  security  program  can  be  designed 
to  effectively  withstand  business 
change  only  when  the  organization  and 
the  IT  department  work  cooperatively. 

Security  Blunders 

Organizations  usually  react  to  threats 
by  implementing  some  new  piece  of 
defensive  technology,  but  while  that 
may  appear  to  be  the  quick  solution,  it 
is  often  the  last  thing  you  should  do. 
Technology  without  proper  strategy 
and  business  value  can  actually  leave 
you  more  vulnerable. 

One  publicly  traded  company  re¬ 
designed  and  replaced  its  firewalls  be¬ 
fore  it  acquired  another  publicly  trad¬ 
ed  company.  The  parent  company  was 
focused  on  shoring  up  its  infrastruc¬ 
ture,  but  it  failed  to  concern  itself  with 
the  new  organization’s  environment 
prior  to  purchase. 

In  this  case,  the  first  dollar  the  pur¬ 
chased  company  transacted  after  the 


merger  put  the  parent 
company  at  risk.  All  the 
parent  company’s  security 
precautions  were  in  vain, 
since  it  had  not  taken  into 
consideration  the  security 
controls  of  the  company  it 
was  acquiring.  And  the 
CEO  and  CFO  were  liable 
for  all  noncompliance  is¬ 
sues  in  both  companies. 

Building  a  Compliant 
Organization 

The  introduction  of  merg¬ 
ers  or  mandates  like  the 
Sarbanes-Oxley  Act  com¬ 
plicate  security,  and  organizations 
need  to  develop  programs  that  take 
them  into  account.  With  compliance 
taking  a  big  bite  out  of  IT  budgets, 
companies  need  to  make  sure  that 
every  dollar  spent  on  technology  gets 
them  closer  to  their  compliance  goals. 
Business-driven,  top-down  strategies 
are  far  better  than  the  typical  ground¬ 
up  approach  of  reacting  to  threats. 
Here  are  some  tips  for  doing  this  right: 

■  Understand  and  fully  interpret  the 
governance  and  compliance  issues  you 
are  faced  with  today.  Realize  that  you 
may  be  subject  to  multiple  mandates 
(Sarbanes-Oxley,  HIPAA  and  Califor¬ 
nia’s  SB  1386,  for  example)  and  that  it’s 
important  to  understand  all  of  them  be¬ 
fore  planning  to  address  any  single  one. 

■  Employ  an  external  organization 
to  provide  a  baseline  or  “gap”  study  of 
your  environment  that  includes  re¬ 
viewing  your  compliance  drivers,  un¬ 
derstanding  your  security  environ¬ 
ment  as  it  stands  today  and  prioritiz¬ 
ing  recommendations.  Engaging  a  con- 


EDWARO  SMITH  Is  director 
of  security  solutions  at 
Forsythe  Solutions  Group 
Inc.,  an  IT  consultancy 
and  infrastructure  firm  in 
Skokie,  III.,  specializing 
in  cost  and  risk  manage¬ 
ment.  Contact  him  at 
esmith@forsythe.com. 


tractor  to  do  this  sidesteps  internal 
politics  that  could  get  in  the  way  of  ex¬ 
posing  security  gaps. 

■  Once  a  gap  is  identified,  have  a 
conversation  with  management  about 
how  IT  will  deliver  process  and  tech¬ 
nology  to  address  the  business  issue  of 
compliance.  Get  management  buy-in. 

■  Create  a  compliance  road  map. 
Specifically  address  how  best  to  solve 
each  compliance  problem  through  the 
chosen  combination  of  technology, 
processes  and  documentation. 

■  Build  incident  detection,  monitor¬ 
ing  and  response  programs,  realizing 
that  the  optimal  security  environment 
starts  with  a  clean  slate,  not  with  the 
addition  of  more  technology  to  an 
existing  mess. 

■  Develop  security  awareness  and 
training  programs,  then  prepare  all 
employees  to  understand  their  securi¬ 
ty  responsibilities. 

Closing  the  Gap 

How  will  the  changing  face  of  informa¬ 
tion  security  affect  the  corporation,  and 
how  do  we  establish  an  effective  busi¬ 
ness  strategy  to  help  it  evolve?  You 
must  realize  that  technology  alone  will 
solve  nothing  and  recognize  that  secu¬ 
rity  requirements  have  evolved  from  a 
technology  issue  to  a  business  issue. 

This  change  requires  challenging 
and  rethinking  the  traditional  ap¬ 
proach  to  security.  Organizations  need 
to  see  security  as  a  business  objective, 
or  even  as  an  enabler  of  new  technolo¬ 
gy  initiatives,  rather  than  as  something 
forced  upon  them.  This  requires  com¬ 
munication  among  business  units  to 
develop  an  environment  that  is  com¬ 
pliant-ready  and  a  culture  that  is  secu¬ 
rity-aware.  Only  by  taking  a  proactive 
approach  that  recognizes  that  security 
extends  beyond  IT  will  companies  stay 
ahead  of  game.  ©  48649 
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IT  Careers:  Illinois,  Chicagoland  Bridge  Old 


to  New  Industry  Age 


In  an  era  past,  Chicago  and  the  state  of  Illinois 
claimed  fame  in  meat  packing,  transportation, 
heavy  machinery,  brewing,  and  corn.  Today's 
economy  is  based  squarely  on  technology  with  more 
than  7,000  IT-specific  companies  and  a  host  of  heavy 
IT  users  ranging  from  Baxter  International  to  Argonne 
National  Laboratory. 

While  most  Illinois  technology  companies  were 
hiring  in  the  hundreds  in  the  1990s,  2004  shows 
listings  in  much  smaller  numbers  -  40  to  50 
specialized  professionals  for  larger  firms  and  five  to 
10  for  dozens  of  smaller  companies  -  for  entry  level 
and  senior  management  IT  jobs.  Allstate  Insurance, 
long  a  leader  in  information  technology  use,  has 
better  than  40  IT  jobs  listed  on  its  website,  while  food 
giant  Archer  Daniels  Midland  has  listings  that  include 
bioinformatics,  application  support,  analysis  and 
opportunities  for  academic  interns. 

Among  the  coups  for  Illinois  and  Chicago  was 
the  announcement  in  fall  2003  that  Chicago's 
McCormick  Place  will  host  the  2006  Biotechnology 
Industry  Organization  International  Conference 
and  Exhibition.  State  leaders  point  to  the  win  as  host 
site  as  an  indicator  of  leadership  in  biomedical  device 
development,  pharmaceuticals,  agri-science,  bio 
remediation,  and  research  and  development 
innovation. 

However,  the  region  is  also  known  for  a  heavy 
load  of  consulting  talent,  ranging  from  giants 
Accenture,  Mercer  and  Hewitt  to  locally  operated 
firms.  Crain's  Chicago  Business  lists  its  technology 


who's  who  as  Michael  Birck,  soon-to-retire  CEO  of 
Tellabs;  Robert  Blackwell  Sr.,  CEO  of  Blackwell 
Consulting  Services,  John  Edwardson,  CEO  of  CDW 
Corp.,  Richard  A.  Forsythe,  CEO  of  Forsythe 
Technology  Inc.,  Gale  E.  Sayers  (yes  the  football 
great),  CEO  of  Sayers  Group  LLC,  and  Judith  A. 
Sprieser,  CEO  of  three-year-old  data  synchronization 
firm  Transora  Inc.  In  addition  to  these  home-grown  IT 
and  software  development  groups,  the  listing 
includes  Carol  Potts,  area  vice  president  for  Hewlett- 
Packard,  and  Allan  Duffy  Gaynor,  a  global  business 
segment  leader  for  IBM. 

The  trend  with  these,  and  others  such  as  Allstate 
Insurance,  Archer  Daniels  Midland,  Motorola  and 
Baxter  International,  is  in  hiring  people  with  specific, 
advanced  skills  such  as  IT  architecture,  analysis, 
development  and  disaster  recovery,  as  well  as  IT 
support  -  in  smaller  numbers,  but  still  hiring. 

The  jobs  are  clustered  in  the  Chicago  area, 
Springfield  and  east  of  St.  Louis,  as  well  as  a  software 
development  core  that  is  scattered  throughout  rural 
Illinois,  including  the  Carbondale/Southern  Illinois 
University  region.  According  to  John  Barr,  project 
manager  for  the  IT  Cluster  in  Illinois'  Department 
of  Commerce,  the  state's  IT  strength  is  in 
hardware/networking,  software  and  data  services. 
Software  has  grown  at  the  fastest  pace,  with  total 
employment  increasing  by  better  than  90%  in  the 
past  decade,  driven  by  growth  with  companies  such 
as  Platinum  Technology,  SPSS,  SoftNet  Technologies 
and  Spyglass. 


INFORMATION 

TECHNOLOGY 

ESTABLISHMENTS 

O  Data  Processing 

•  Hardware  & 
Networking 

O  Software 


source: 

State  of  Illinois,  DCOE 

SHOMEX,  long  known  for  its  diversity  job  fairs,  is 
launching  a  new  regional-focused  product  to  meet 
technology-hiring  requirements.  The  first  show, 
according  to  Cris  Levy,  vice  president  of  marketing,  is 
Jan.  19  at  the  Navy  Pier  in  Chicago.  More  than  30 
companies  are  expected  to  participate  in  the  job  fair. 

For  more  information  about  IT  Careers  advertising, 

please  contact:  Nancy  Percival 

Vice  President,  Recruitment  Advertising 

800.762.2977 

500  Old  Connecticut  Path 

Framingham,  MA  01701 

Produced  by  Carole  R.  Hedden 


NovaSoft  Information  Techn¬ 
ology  Corp.,  a  software  consult¬ 
ing  firm  &  web  development  co., 
is  seeking  Programmer  Analysts 
w/one  of  the  following  sets  of 
qualifications  to  work  in  the 
Minneapolis  area: 

‘2  yrs  exp.  designing/devel. 
apps  using  SQL  Server,  Visual 
Interdev  6.0,  VB  6.0,  ASP, 
JavaScript  &  HTML 

"1  yr  exp.  designing/devel.  apps 
using  Lotus  Notes,  Domino  & 
Windows  NT,  &  setting  up 
Domino  Servers  &  Lotus  Notes 
on  Windows  NT 

*2  yrs  exp.  devel./testing  strate¬ 
gies  using  Test  Manager, 
Rational  Clear  Quest,  Rational 
Clear  Case,  WinRunner  & 
LoadRunner 

BS  in  Comp.  Sci.,  CIS,  Engrg, 
Electronics,  Busns  or  Math  +  2 
yrs  exp.  as  a  Prog.  Analyst, 
Sftwr  Engr,  Syst.  Analyst, 
Consultant  or  QA  Analyst/Engr 
rqd.  Excellent  salry/benfts  pkg. 
Send  resumes  to:  NovaSoft 
Information  Technology  Corp., 
ATTN:  HR  Dept.,  8400 

Normandale  Lake  Blvd,  Ste  920, 
Bloomington,  MN  55437. 


Database  Analyst.  Design, 
implement,  maintain  data¬ 
base,  web  pages,  software 
tools  and  documentation  for 
marketing  and  financial  soft¬ 
ware  applications.  Must  have 
Bachelor's  in  Information 
Systems,  Accounting  or  relat¬ 
ed  1  yr.  exp.  and  knowledge 
of  Microsoft  SQL  database 
programming,  ASP  program¬ 
ming,  C,  Visual  Basic,  HTML 
and  Java  programming.  Send 
resume  to  Infinity  Investments 
Inn ,  Attn:  Jim  Balvanz,  373 
Collins  Rd.  NE,  Cedar 
Rapids,  IA  52402, _ 


Lead  SW  Dev  Engineer  -  Lead  a 
team  or  be  able  to  independent¬ 
ly  design,  develop,  code,  test  & 
debug  new  SW  or  make  signifi¬ 
cant  enhancements  to  existing 
SW  of  moderate  complexity 
using  knowledge  of  Oracle  6.0  - 
8.x;  Unix  shell  script,  C++, 
Javascript,  HTML,  SQL,  PL/ 
SQL;  Oracle  Developer  2000  & 
Oracle  Designer  2000.  Develop 
solutions  across  many  disci¬ 
plines  &  be  responsible  for 
explaining  solutions  &  proce¬ 
dures.  Apply  principles,  theories 
&  concepts  &  use  methodolo¬ 
gies,  tools,  documentation 
processes  &  test  procedures  to 
complete  projects  related  to 
moderately  complex  SW.  BS  in 
Comp.  Sci,  Engin.  or  related 
field  &  3  yrs  exp  &  working/theo¬ 
retical  knowledge  of  DB 
Development/Admin  in  Oracle 
6.0-8.X;  Programming  using 
Unix  Shell  Script,  C++,  Java¬ 
script,  HTML,  SQL,  PL/SQL,  & 
Oracle  Developer  2000/Oracle 
Designer  2000.  $73,333/yr.  M-F. 
40  hrs/wk.  Denver,  CO.  Must 
have  proof  of  legal  authority  to 
work  permanently  in  U.S. 
Application  by  resume  only  to 
Workforce  Development  Prog¬ 
rams,  PO  Box  46547,  Denver, 
CO  80202.  Ref  job# 
CO5088677. 


S/W  Engineers  to  analyze,  de¬ 
sign  business  appls  for  SAP 
R/3,  ABAP,  Workflow,  C,  C++, 
Java.  VB,  Oracle,  SQL,  etc. 
under  Windows,  UNIX  OS;  ana¬ 
lyze  business  processes  to 
determine  reqs  &  generate  re¬ 
ports;  prepare  documents,  flow 
charts  and  programming  specs; 
create  appl  prototypes  for  client 
approval  and  rapid  appl  devel¬ 
opment;  train  users  in  business 
appl  usage.  Require:  MS  or  for¬ 
eign  equiv.  in  CS/Engg.  (any 
branch)/Math  &  1  yr  exp  in  IT. 
High  salary.  F/T  position.  Travel 
Required.  Resume  to  HR, 
Smartsoft  International,  Inc., 
3965  Johns  Creek  Court, 
Suwanee,  GA  30024. 


Software  Engineer  -  Applic¬ 
ations.  Sought  by  Englewood 
Colorado  consulting  company  to 
work  in  various  unanticipated 
locations  throughout  the  U.S. 
Duties:  Develop,  create  and 
modify  general  computer  appli¬ 
cations  software  or  specialized 
utility  programs.  Analyze  user 
needs  and  develop  software 
solutions.  Design  software  or 
customize  software  for  client  use 
with  the  aim  of  optimizing  opera¬ 
tional  efficiency.  Analyze  and 
design  databases  with  an  appli¬ 
cation  area.  Use  of  Oracle, 
JavaScript,  Perl,  Sybase, 
Intershop,  ASP,  HTML,  SQL  and 
Windows  NT.  Reqs.  Masters  or 
equivalent  in  Computer  Science, 
Computer  Engineering,  Engin¬ 
eering  (any  field)  or  related  field. 
Plus  1  year  in  the  job  offered  or 
1  year  in  a  related  occupation, 
including  Programmer  Analyst, 
Internet  Specialist  or  Prog¬ 
rammer  $75, 000/year,  40/hrs/ 
wk,  9AM-5PM.  Respond  by 
resume  to  WORKFORCE  DEV¬ 
ELOPMENT  PROGRAMS,  PO 
Box  46547,  Denver,  CO  80202, 
and  refer  to  Job  Order  No.  CO 
5086067 


Computer  Support  Specialist 

To  support  multiplatform  com¬ 
puter  hardware  and  software 
systems  users  in  PC  and  Unix 
environment  and  maintain  the 
company's  NT  Servers  and  web¬ 
site.  Require  B.S.  in  Computer 
Information  Systems,  Computer 
Engineering  or  closely  related 
field  and  proficiency  in  both 
Windows  and  Unix  operating 
systems  and  in  ASP,  ASP.NET  & 
SQL  Server.  40hrs/wk.  Send 
resume  &cover  to  HR,  HGS 
Engineering,  Inc.,  1121  Noble 
Street,  Anniston,  AL  36201.  Job 
Code:  AL-KS. 


Senior  Software  Architect, 
Delray  Beach,  Florida:  Analyses 
existing  functionality  and  pro¬ 
gramming  of  current  system  and 
evaluates  client  requirements  for 
new  or  modified  software  sys¬ 
tem.  Within  time  and  cost  con¬ 
straints  analyzes,  researches, 
designs,  develops,  and  cus¬ 
tomizes  in  Unix  financial  appli¬ 
cations  in  a  client-server  envi¬ 
ronment  utilizing  Shell  Scripting, 
C/C++,  SQL,  Motif,  Perl  and 
SYBASE.  Prepares,  plans, 
develops,  codes,  implements 
and  documents  software  sys¬ 
tems  using  detailed  design  doc¬ 
uments,  object  models  and  data 
flow  diagrams  including  data 
structure,  algorithm  and  proce¬ 
dure  flow.  Requirements: 
Master  degree  in  one  of  the  fol¬ 
lowing:  Computer  Science/ 
Engineering,  Mathematics, 
Computational  Science  or  relat¬ 
ed  area  and  two  years  experi¬ 
ence  in  the  job  offered  or  a  Ph.  D 
degree  and  six  months  experi¬ 
ence.  Wages  Offered:  $185,000 
per  year.  Hours:  40  hrs  per 
week:  Monday  to  Friday,  9:00am 
to  6:00pm.  Send  resume  to 
Workforce  Program  Support, 
PO.  Box  10869,  Tallahassee,  FL 
32302-0869,  Att:  EH.,  Job  Order 
FL-2526398 


Stanford  Technology  Partners 
Inc.  is  an  IT  consulting  company 
with  its  clients  across  the  USA. 
We  seek  a  Peoplesoft  EPM 
Functional  Consultant.  Duties 
include  reporting  tool  selection; 
Identifying  legacy  system  report¬ 
ing  &  architecture;  conceptual 
sizing  of  hardware  configurations 
for  Peoplesoft  reporting  tools; 
creating  conceptual  design  docs; 
assisting  staff  on  docs,  identify¬ 
ing  gaps  in  source  system,  pre¬ 
sent  EPM  module  to  mgmt  and 
team  members  for  review  and 
implantation.  Job  is  located  in 
Tallassee,  Florida  or  unanticipat¬ 
ed  locations  throughout  the  USA. 
If  interested,  please  send  resu¬ 
me  to:  STPI,  289  Boston  Tpke  #6 
Shrewsbury,  MA  01545  e-mail: 
recruiter@stDincusa.com 


R  Systems,  Inc.  is  a  global  infor¬ 
mation  technology  services 
company  and  it  has  multiple  Job 
openings  for  the  following  posi¬ 
tions  at  its  corporate  office  in 
Sacramento  as  well  as  Project 
sites  throughout  the 
United  States: 

•  Applications  Programmer 

•  Database  Analyst 

•  Software  Engineers 

•  Systems  Analyst 

•  Network  Analyst 

•  IT  Project  Managers 

•  Business  Analyst 

•  Sales  Engineer 

•  Programmer  Analyst 

•  Sales  Manager 

•  Database  Administrators 

•  Market  Research  Analyst 

Minimum  requirement:  Bach¬ 
elor's  degree  or  equivalent  and 
one  year  experience  in  the  job 
offered.  All  positions  may  involve 
relocation  to  project  sites. 

Submit  detailed  resume  and 
position  applied  for  to: 

Attn:  Venkatesh  Sundararajan 
5000  Windplay  Drive  Suite  5 
El  Dorado  Hills,  CA  95762 


Programmer  Analyst,  auto 
parts  export.  Evaluate  user 
req  &  implement  specialized 
computer  programs,  inc  inven¬ 
tory,  US  &  export,  customs  & 
fiscal  req,  SBT  accounting 
system  in  visual  fox  pro  lan¬ 
guage,  warranty/defect  con¬ 
trol,  &  pricing/cost  analysis/ 
availability.  M-F  9-5  $51,000 
yr.  Bachelor  in  computer  field 
or  equiv  ed  &  exp  &  2  yrs  exp. 
Resume  to  Workforce  Pro¬ 
gram  Support,  PO  Box  10869, 
Tallahassee,  FL  32302-0869. 
Re:  Job  Order  #FL2544978. 


The 

right  skills 
fuel 

the  new 
economy. 

itcareers.com 


'1; 


Computerworld  •  InfoWorld 


Network  World  •  August  23,  2004 


CW082304E/MW/W  1 


I 

i 

f 


SOFTWARE  ENGNR,  APPLNS 


IT  Careers 
Wants  You! 

Take  the  hassle  out  of 

job  searching  and 

check  us  out  at 

www.itcareers.com. 

Today,  more  than  ever, 
the  right  skills  fuel  the 
new  economy  and  IT 

Careers  wants  you  to  be 

there.  Check  us  out  at: 

www.itcareers.com 


Dvlp,  create  &  modify  web- 
based  computer  work  sys.  fol¬ 
lowing  a  life-cycle  full  dvlpmnt 
protocol.  Dsgn  customized 
applns  to  optimize  operational 
efficiency.  Analyze  &  dsgn  appln 
dbases.  BS  in  Comp.  Sci., 
Electrical  or  Electronics  Engnrg 
reqd  +  3  yrs  exp.  in  position 
offered  or  as  a  Software  Engnr 
or  Prog.  Analyst.  Exp.  must  incl. 
Microsoft.net  tool  technologies 
like  ASP.net.  C#.  VB.net,  SQL 
Server  2000,  XML/XSL  utilizing 
IIS  &  component  dsgn  &  dvlpm¬ 
nt  using  Visual  Basic/C++.  40 
hrs/wk,  8am  -  5pm,  OT  as  reqd, 
$66,730/yr.  Submit  resumes  to: 
Mon  Valley  Regional  Career- 
Link,  Attn:  Actg.  CL  Program 
Supervisor,  Donora  Industrial 
Park,  570  Galiffa  Drive,  Donora, 
PA  15033.  Refer  to  Job  Order 
No.  445142. 


Senior  Programmer  Analysts  to 
lead  teams  to  analyze,  design, 
develop,  implement  appls  using 
SAP,  C,  J2EE,  JSP,  RMI,  Web¬ 
sphere,  Weblogic,  and  EAI  tools 
like  Mercator,  Sybase,  Vitria, 
Webmethods,  etc  under  Win¬ 
dows/Unix  OS;  responsible  for 
data  modeling,  gap  analysis, 
etc;  involve  in  system/business 
analysis;  develop  functional 
specs  based  on  business  reqs; 
design,  develop  interfaces  and 
perform  integration  of  various 
modules;  test  team  members/ 
train  end  users.  Require:  BS  or 
foreign  equiv  in  CS/Engg.  (any 
branch)  &  3  yrs  exp  in  the  IT 
held.  Travel  involved.  F/T  posi¬ 
tion.  competitive  salary.  Resume 
to:  HR,  Koneru  Software 
Services,  333  Swanson  Dr.,  Ste 
124,  Lawrenceville,  GA  30043. 


Multiple  openings  for  Program¬ 
mer/Systems  Analysts,  Software 
Engineers:  Must  have  BS  in 
Com  Sci  or  rel  field  plus  2  yrs 
exp  in  requirement  analysis,  De¬ 
sign  and  development,  resolving 
the  technical  issues  W/exp  in 
two  or  more  of  the  following 
skills:  Oracle  Applications  (GL, 
AP,  AR,  FA,  PO,  INV,  OM,  CM, 
BOM  modules  ver  11/11i)  Oracle 
Reports,  forms,  Discoverer, 
Unix,  Solaris,  C/C++,  JAVA, 
XML,  PeopleSoft,  Cognos,  Win / 
Load  Runner,  DB2,  PLSQL,  MS- 
SQL,  Sybase,  PB,  VB,  ASP,  .net 
&  Windows.  Resumes  to  Z3 
Technologies  Inc.,  11400  W 
Bluemound  Rd,  Wauwatosa,  Wl 
53226. 

emails:  resumes@z3tech.com 


Programmer  Analyst:  program, 
implement,  edit,  and  maintain 
user  application  programs. 
Trouble-shoot,  compile  and  doc¬ 
ument  program  development. 
Req.  Bachelor's  degree  or  for¬ 
eign  equivalent  (based  on  edu¬ 
cation  or  work  experience,  or 
both)  in  CS,  CE,  Electrical  & 
Electronic  Engineering,  MIS, 
ME,  Electronic  and  Comm¬ 
unication  Engineering  or  related 
field  with  proficiency  in  either 
Baan,  Oracle  Financial  ERP, 
Java/ Weblogic/ Websphere, 
Informatica,  Siebel  or  C++/ 
Corba.  40hr/wk,  9:00  a  m.-  5:00 
p.m.  Send  resume  to  Visionsoft 
International,  Inc.,  1842  Old 
Norcross  Road,  Suite#  100 
Lawrenceville,  GA  30044 


Need  IT  Professionals  like 
Software  Engineers,  Program¬ 
mer  Analysts,  IT  Business 
Managers  for  company  based 
in  Bristol,  PA.  MS/BS  Degree 
or  equivalent  in  C.S,  CIS,  MIS, 
Engg  (any),  Math,  Phy.  /  rel 
field  and/or  rel.  work  exp.  All 
positions  may  involve  travel 
&/or  relocation  to  project  sites 
throughout  the  U.S.  Mail 
resumes  to  HR  at  Systems 
People,  Inc.,  1200  New 
Rodgers  Road,  C  7B,  Bristol, 
PA  19007.  State  the  post 
applied  for _ 


Find  out  how  you  can  invest  in  one  of 
Entrepreneur  Magazine's  “HOT  100 
Franchises”,  and  in  a  Franchise  Times 
“FAST  55”  company  Single,  Multi-Units 
and  Area  Development 
Opportunities  are  now  available. 
For  more  information  call 

< MXMKEH 

or  visit  us  at  ^7) 

geeksoncall.com 


On  Call  America,  Inc. 


TOSUCCI 


JOIN  THE  $300  BILLION 

COMPUTER  SERVICE  BUSINESS. 


Database  Consultant/Software 
Engineer  to  serve  as  senior  con¬ 
sultant  to  provide  strategic  tech, 
leadership  for  data  architecture 
across  Co's  systems  &  market 
data  services.  Will  initiate,  plan 
&  implement  complex  database 
development  projects,  providing 
direction  for  DBMS  operational 
&  warehousing  methods  &  tools; 
research  DBMS  technology;  rec¬ 
ommend  changes  in  project 
development  methods  &  strate¬ 
gies  to  architects  &  manage¬ 
ment.  Requires  Bachelor's  or 
equiv  in  C.Sc.,  Engineering, 
Math,  or  Physics  plus  6  yrs  ex- 
per  in  job  offered,  OR  6  years  in 
Database  Administration;  Alter¬ 
natively,  will  accept  No  degree 
plus  8  yrs  of  exper  in  job  offered, 
OR  8  yrs  in  Database  Adminis¬ 
tration.  Candidate  must  also 
possess  demonstrated  expertise 
in  DB2  administration,  inch 
UDB,  AIX,  and  SOLARIS,  and 
UDB  replication  in  a  zero  latency 
environment;  demonstrated  ex¬ 
pertise  in  ORACLE  administra¬ 
tion,  including  PL/SQL  program¬ 
ming,  performance  tuning  & 
optimization;  and  demonstrated 
expertise  in  strategic  data  archi¬ 
tecture,  including  actuate  report¬ 
ing,  ETL  tools  &  operational  data 
storage  analysis.  Sal:  $94,750/ 
yr,  M-F,  9A-5P.  Send  2  resumes 
to  Job  Order  #2004-226,  P.O. 
Box  989,  Concord,  NH  03302- 
0989.  EOE.  Applicants  must  be 
U.S.  workers  eligible  to  accept 
full-time  U.S.  employment. 


IndusValley  Consultants,  Inc.,  is 
a  global  IT  systems  integration 
and  solutions  firm  has  openings 
for  the  following:  Software  Engin¬ 
eers:  Research,  Architect,  Inte¬ 
grate  distributed  applications  uti¬ 
lizing  various  software's  such  as 
SAP  R/3,  Clarify,  Siebel,  Oracle 
Apps,  Visual  Basic,  Java,  Tibco. 
Provide  leadership  to  complete 
design  solutions,  write  code,  per¬ 
form  testing,  provide  documenta¬ 
tion,  and  implement  develop¬ 
ment  projects.  Need  Master's 
Degree  in  Computer  Science  or 
related  and  2  years  of  experi¬ 
ence.  Programmer  Analysts: 
Plan,  test  and  develop  web  appli¬ 
cations  for  ERP  and,  CRM  pack¬ 
ages.  Design  and  develop  client- 
server  applications  using  Java, 
ASP,  VB.  C,  Clarify,  Siebel  and 
AutoCAD2002.  Interact  with  cli¬ 
ents  to  design  the  functions  of 
software  according  to  client  spe¬ 
cifications.  Need  Bachelor's  De¬ 
gree  in  Computer  Science  or 
related  and  2  years  of  experi¬ 
ence.  Send  resume:  HR  Mana¬ 
ger:  401  E.  8th  St.,  Ste.  #  200Y, 
Sioux  Falls,  SD  57103. 

E-mai::  sam@lndusvalley.com 
fax:  800-440-1907. 


IT  PROFESSIONALS 

Senior  Consultant/Technology 
Solutions 

(Glen  Mills,  Pennsylvania  and 
other  locations  throughout  the 
U.S.).  Design  and  implement 
leading  business  application  sof¬ 
tware  to  provide  solutions  for  cli¬ 
ents  focusing  in  the  manufactur¬ 
ing  and  consumer  business  ind¬ 
ustries.  Engage  in  design  and 
implementation  of  process  and 
technology  solutions  for  supply 
chain  optimization,  production 
planning  and  scheduling,  quality 
management,  business  to  busi¬ 
ness,  customer  management 
and  business  intelligence.  Scope 
and  plan  functional  requirements 
along  with  design,  development, 
customization  and  implementa¬ 
tion  of  applications  using  SAP  R / 
3,  SAP  Business  Intelligence  and 
SAP  Industry  Solutions  and  cus¬ 
tomization  of  supply  chain  opti¬ 
mization  using  i2  technologies. 

Salary  $77,126  per  year.  Mon- 
Fri,  9:00  am  to  5:00  pm.  The  pos¬ 
ition  requires:  Bachelor's  degree 
in  Computer  Science,  Computer 
Engineering,  IS,  MIS  or  related  + 
2  years  of  experience  in  the  job 
offered  or  2  years  of  experience 
as  Technical  Consultant,  EPR  In¬ 
tegration  Engineer,  SAP  Produc¬ 
tion  Engineer  or  related  occupa¬ 
tion.  Related  experience  must 
include  utilization  of  configura¬ 
tion,  development  and  business 
technical  data  warehousing  skills 
and  include  SAP  R/3,  SAP  Busi¬ 
ness  Intelligence.  SAP  Industry 
Solutions  and  i2  Technologies. 

Please  send  your  resume,  refer¬ 
encing  Job  Order  Number 
WEB444831  to  the:  PA  Career- 
link,  FLC  Unit,  235  W.  Chelten 
Avenue,  Philadelphia,  PA  19144. 
EOE 


NovaSoft  Information  Tech¬ 
nology  Corp.,  a  sftwr  consulting 
firm  &  web  development  co.,  is 
seeking  a  Programmer  Analyst 
to  work  in  the  Minneapolis  area 
who  will  be  respons.  for  dsgn, 
dvlpmnt  &  implem.  of  client/serv¬ 
er  appl.  sftwr  using  current  IT 
skills.  AS  in  Comp.  &  Info  Sci., 
Chemistry,  Math,  Busns  or 
Engrg  &  2  yrs  exp.  as  Prog. 
Analyst,  Sftwr  Engr,  Sftwr 
Consultant  or  Proj.  Mgr  rqd. 
Must  have  2  yrs  exp.  w/ 
Arcnet/Ethernet  protocols, 
CSMA/  CD  protocols,  WAN 
solutions  (PC  Connect  & 
Netware),  TCP/IP,  Win  NT  & 
IPX/SPX,  &  2  yrs  exp.  w/user  & 
busns  requirements  analysis. 
Excel,  salary/benefits  pkg.  Send 
resumes  to:  NovaSoft  Infor¬ 
mation  Technology  Corp.,  ATTN: 
HR  Dept.,  8400  Normandale 
Lake  Blvd,  Ste  •  920, 

Bloomington,  MN  55437. 


Vensai  Technologies  has  the  fol¬ 
lowing  openings  for  individuals 
to  work  at  client  sites  throughout 
the  U.S.:  Application  Developer 
with  exp  in  EDI,  Java, 
Websphere,  DB2,  Mercator; 
DBA  with  exp  in  DB2,  Oracle, 
Solaris,  Siebel  and  Decision 
Support  Products;  System 
Analyst  with  exp  building  n-tier 
static/web  applications,  Cold 
Fusion,  CFMX,  HTML,  Java¬ 
Script,  CSS,  Oracle,  SQL; 
System  Programmer  with  exp  in 
DB2  stored  procedures,  C,  C++, 
Cobol,  Java,  MVS  Internals, 
JES2,  OS;  System  Analyst  with 
exp  in  C,  Peoplesoft,  RTOS, 
pSOS/vxWorks,  Texas  Instru- 
-ments,  DAC's  and  ADC's; 
Software  Engineer  with  exp  in 
Clarify  modules,  Java,  EJB, 
JSP,  Weblogic,  Oracle,  J2EE, 
MQ  Series,  Tuxedo,  Rational 
Rose,  ClearQuest,  Clear  Case; 
PeopleSoft  Java  Programmer 
with  exp  in  Peoplesoft,  Java, 
Oracle,  Discoverer,  Developer; 
Client  Server  Software  Engineer 
with  exp  in  eCRM  packages, 
Siebel,  Vantive  and  Onyx.  ETL 
Programmer  Analyst  with  exp  in 
ETL  tools  in  large  scale  Data 
Warehousing  Projects,  SQL, 
Oracle,  DB2,  Solaris  and 
Rational  Tools.  All  applicants 
must  have  B.S.  in  Computer 
Science,  Engineering  or  relat¬ 
ed.  Apply  to:  Vensai  Techn¬ 
ologies,  20  Trafalgar  Square, 
Suite  400,  Nashua,  NH  03063 


IT  Professionals,  exp'd,  sought 
by  a  Software  Consulting  Co.,  in 
any  of  following  areas  (i)  J2EE 
Architecture,  weblogic  or  iplanet, 
JavaScript  &  XML/XSLT  (ii) 
Oracle  Forms,  Reportwriter  & 
Database  Dsgn  (iii)  Lotus  Notes, 
SDLC,  PVCS  VM.  Tracker  rela¬ 
tional  d/bases  &  IBM  MQ  Series 
(iv)  Datawarehousing  applies 
using  Informatica,  Powercenter, 
Powerconnect,  Cognos  Report- 
net  &  Metrics/Framework  &  (v) 
C,  C++.  ASP,  VSS,  SQL  Server, 
XML  &  Net.  BS  in  Comp  Sci, 
Eng.  or  related  field.  Applicants 
must  be  willing  to  relocate/travel 
to  various  unanticipated  Iocs 
throughout  US.  Resume  to 
DatamanUSA,  Attn.  HR,  315A 
West  Lincoln  Way,  Ste  15, 
Cheyenne,  WY  82001  or  email 
to  jobs_wy@datamanusa.com. 
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IT  PROFESSIONALS 
Senior  Consultant 

(Glen  Mills.  PA  and  other  locations  throughout  the  United  States).  Provide 
professional  consulting  services  in  the  areas  of  business  process  trans¬ 
formation  and  implementation  of  integrated  software  solutions  to  meet 
evolving  business  needs.  Review  and  analyze  client  business  process 
requirements,  determine  optimal  integration  of  business  process  engi¬ 
neering  and  emerging  information  technologies,  and  propose  strategic 
solutions  and  business  process  improvements  including  benchmarking 
and  design  analysis.  Lead  the  design  and  implementation  of  mySAP.com 
EBP  such  as  BugsEys/eMerge  Catalog  management  tools  including  SAP 
MM  (Materials  Management)  &  PP  (Production  Planning),  SAP  Business 
Warehouse  and  SAP  SD  (Sales  &  Distribution)  &  WM  (Warehouse 
Management),  to  provide  best-of-breed  functionality  built  for  complete 
integration,  industry-specific  capabilities,  unlimited  scalability,  and  easy 
collaboration  over  the  Internet.  Lead  the  implementation  of  mySAP.com 
middleware  technologies  such  as  SAP  Business  Connectors,  ALE 
(Application  Link  Enabling),  BAPI,  and  IDOC  to  provide  a  program  distri¬ 
bution  model  and  technology  that  enables  clients  to  interconnect  pro¬ 
grams  across  various  platforms  and  systems.  Implement  project  man¬ 
agement  tools  and  create  and  apply  solution  specific  methodologies  to 
ensure  that  the  delivery  and  implementation  of  software  solutions  meets 
client  requirements  and  industry  standards. 

$  103,000/year.  Mon-Fri  9:00am-5:00pm.  The  minimum  requirements  are 
as  follows:  Bachelor’s  degree  or  equivalent  in  Computer  Science,  Engin¬ 
eering  (any),  or  Information  Systems  plus  4  years  of  experience  in  the  job 
offered  or  4  years  of  experience  as  a  Senior  Consultant.  SAP  Consultant, 
or  Executive.  Employer  will  regard  a  foreign  degree  to  be  equivalent  to  a 
U.S.  Bachelor's  degree  as  determined  by  an  accredited  foreign  creden¬ 
tials  evaluation  service.  Related  experience  must  also  include  2  years  of 
mySAP.com  EBP,  SAP  MM  (Materials  Management)  &  PP  (Production 
Planning),  SAP  Business  Warehouse,  SAP  SD  (Sales  &  Distribution)  & 
WM  (Warehouse  Management),  mySAP.com  middleware  technologies  & 
project  management  tools. 

Please  send  your  resume,  referencing  Job  Order  Number  WEB444883  to 
the:  PA  CareerLink,  FLC  Unit,  235  W.  Chelten  Avenue,  Philadelphia,  PA 
19144.  EOE. 


QA  Engineer  Req  #608Design 
and  develop  Dynamics  quality 
assurance  test  applications  us¬ 
ing  4GL,  ADM2,  Dynamics  Tools 
and  distributed  computing  tech¬ 
nologies.  Install  and  configure 
applications  in  both  Windows 
and  Sun  operating  systems. 
Assist  technical  support  person¬ 
nel  with  product  issues;  validate 
product  defects  and  report  using 
internal  defect  tracking  system. 
Must  have  B.S.  in  CS  +  5  yrs. 
exp.  or  M  S.  +  6  mos.  exp.  in 
software  development.  Must 
have  knowledge  of  Java,  XML, 
OOP,  RDBMS,  PROGRESS 
4GL,  ADM  Tools  and  Dynamics. 
Interested  applicants  should 
submit  resume  to  S.  Fernandois, 
Progress  Software  Corp.  14  Oak 
Park,  Bedford,  MA  01730  - 
Equal  Opportunity  Employer. 
For  immediate  consideration, 
please  visit  our  career  page  at 
http;//caree  rs.peopleclick.com/ 
CIient40_ProgressSoftware/ 
BU1/External_Pages_PSC/Job 
search.htm  and  apply  online,  re¬ 
ferring  to  the  requisition  #  for  the 
position  for  which  you  are  apply¬ 
ing. 

Jr.  Programmer  Analyst.  Assist 
PA.  in  researching,  designing 
and  developing  s/w  for  integrat¬ 
ed  Business-to-Business  proto¬ 
col  interfaces  using  middleware 
SeeBeyond  e*Gate  integrator 
suite  and  diverse  sys.  w/in  an 
enterprise  using  message  based 
brokering  s/w.  Test  s/w  on  ALX 
servers  and  fine  tune  app.  using 
various  UNIX  memory  mgmt. 
tools.Assist  in  creating  and  ana¬ 
lyzing  data  back  up  scripts  and 
in  UNIX.  Assist  in  bldg,  real  time 
and  batch  mode  J2EE  comp, 
app.  using  J2EE  technologies 
such  as  servlets,  JSPs,  JMS, 
JNDI,  and  JDBC  and  app. 
servers,  which  include  IBM 
Websphere,  BEA  Weblogic  and 
Apache  Tomcat.  Req:  BS  in 
comp.  Info.  Sys.,  comp.  Sci.,  or 
related  area.  40hrs/wk. 

Job/Interview  Site:  Des  Moines, 
IA.  Send  resumet  to  Chuck 
Gutta,  Emprise  Consulting  LLC 
@  2915  Redhill  Ave.  #  F202, 
Costa  Mesa,  CA  92626. 

Jr.  Programmer  Analyst.  Assist 
PA.  in  researching,  designing 
and  developing  s/w  for  various 
business  problems  using  J2EE 
and  object-oriented  design  prin¬ 
ciples  and  technologies  incl. 
UML  and  Waterfall  models,  and 
RUP  process.  Assist  in  testing 
s/w  solutions  using  Java,  J2EE, 
JSP,  Stmts,  Servlets,  Swing  on 
Unix  and  windows  NT.  Assist  in 
developing  s/w  for  SQL  Queries 
and  stored  procedures  on  SQL 
Server  and  Oracle.  Provide  test 
cases  and  other  doc.  in  CMM  5 
standards.  Req:  BS  in  comp. 
Sci.,  Comp.  Eng.,  or  Elect.  Eng. 
40hrs/wk.  Job/Interview  Site:  De 
Moines,  IA.  Send  Resumes  to 
Emprise  Consulting  LLC,  Attn: 
Chuck  Gutta,  2915  Redhill  Ave., 
#  F202,  Costa  Mesa,  CA  92626. 

Seeking  qualified  applicants  for 
the  following  positions  in  Collier¬ 
ville.  TN:  Senior  Proiect/Process 
Analyst.  Perform  Droiect  olan- 
ning  and  analysis  and  provide 
project  leadership  for  IT  pro¬ 
jects,  processes  and/or  on-going 
programs.  Requirements:  Ba¬ 
chelor's  degree  or  equivalent*  in 
business,  computer  science, 
MIS  or  related  field  plus  5  years 
of  experience  in  planning,  pro¬ 
ject  management  or  process 
analysis  of  IT  projects.  Experi¬ 
ence  with:  either  SQL,  ASP  or 
CSP;  either  Crystal  Reports  or 
Crystal  Enterprises;  and  Win¬ 
dows  2000  Server  also  required. 
'Master's  degree  in  appropriate 
field  will  offset  2  years  of  gener¬ 
al  experience.  Submit  resumes 
to  Roger  Wright,  FedEx  Corpor¬ 
ate  Services,  80  FedEx  Park¬ 
way,  Room  108,  Collierville,  TN 
38017.  EOE  M/F/DA/. 

Principal  Software  Engineer:  Pri¬ 
mary  responsibility  for  the  devel¬ 
opment  of  networking  software. 
Responsible  for  functional  spec 
dev,  arch  design,  implementa¬ 
tion  and  verification.  MS  or  for¬ 
eign  equiv.  in  EE  or  CS  plus  5  yr. 
exp.  that  must  include  3  yr.  with 
one  or  more  network  protocols 
including  IP,  TCP,  ARP,  DHCP, 
DNS,  SNMP, and  firewall.  .  Must 
be  familiar  with  IP  QOS  proto¬ 
cols  and  RFCs.  Must  have  dev¬ 
elopment  exp.  with  Linux,  and  in 
C/C++.  Please  send  resume  to 
Ucentric  Systems,  2  Clock  Tow¬ 
er  Place,  Suite  550,  Maynard, 
MA  01754,  Attn  to  Pat  Riley. 

Business  Analysts  to  gather,  an¬ 
alyze,  document,  propose  sys¬ 
tems  solutions;  lead  JAD  sess¬ 
ions  to  analyze,  define  user  busi¬ 
ness  reqs,  process  descriptions, 
use  cases,  scenarios  using  ratio¬ 
nal  rose,  visio  etc.;  re-engineer 
business  processes/procedures, 
define/document  data  models 
using  SSAD,  OOAD,  RUP  meth¬ 
odologies;  analyze  system  per¬ 
formance  to  understand  excep¬ 
tions,  anomalies,  problem  areas; 
provide  direction/assist  project 
teams;  Require  Bachelors  in 
Business/Mgmt/CS/Engineering 
with  2  yrs  or  related  exp.  Compe¬ 
titive  salary.  Travel  involved.  F/T. 
Resume  to:  HR,  Bahwan 
Cybertek  Technologies,  Inc.,  209 
West  Central  Street,  Ste  312, 
Natick.  MA  01760. 

The  World 
Of  Work  Is 


Changing 
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or  call  (800)  762-2977 


Computerworld  •  InfoWorld  •  Network  World  •  August  23,  2004 


CW082304 E/MW/W  3 


it  careers.com 


A  Call  To  Action! 

Take  the  hassle  out  of 

searching  for  the  right 

candidate  and  contact  us 

at  (800)  762-2977. 

We  can  place  your 
message  in  front  of  2/3  of 
all  US  IT  professionals. 

Call  (800)  762-2977 

www.itcareers.com 


MagnaQuest,  Inc. 

Programmer  Analysts:  Design, 
develop  and  test  Internet  based 
programs  for  EBPP  packages, 
Electronic  Billing  Presentation 
and  Payment.  Design  client- 
server  applications  using  JAVA, 
EJB,  NetDynamics  and  Oracle. 
Interact  with  clients  to  design 
the  functions  of  software  ac¬ 
cording  to  client  specifications 
using  Unix,  C++,  Corba,  XML, 
UML,  WEBLOGIC  7,  testing 
tools.  Req.  Bachelor's  degree 
in  Computer  Science  or  Engg. 
and  1  year  of  exp.  Send 
resume  to:  HR,  MagnaQuest, 
Inc.,  16219  S.  31st  Way, 
Phoenix,  A Z  85048.  E-mail: 
mqusa@magnaquest.net. 


System/Programmer  analysts, 
IT  engineers  needed  by  E  IT 
professionals,  Inc.  to  design 
system  applications  to  meet 
client's  requirements  using 
Java,  Oracle,  VB,  Web  Tech, 
Unix,  SQL,  SAP,  JSP,  J2EE,  MS 
Tech,  etc.  BS/MS  with  IT  exp 
required.  Contact 
pete@itprofs.net.  EOE.  No  calls. 

OTS  (Object  Tech  Solutions) 
has  multiple  openings  for  IT  pro¬ 
fessionals  (software  engineers, 
system/program  analysts,  DBA, 
etc)  to  design  and  develop  appli¬ 
cations  using  various  skills  such 
as  VB,  Oracle,  Java, 
WebSphere,  SQL,  SAP.  Req 
MS/BS  with  exp.  Contact 
resumes@otsi-usa.com.  EOE. 


Sage  IT  is  looking  for  IT  profes¬ 
sionals  to  develop  applications 
using  Cognos  Impromptu, 
PowerPlay,  ReportNet,  SQL, 
Oracle,  Tera  data  (NCR),  Sybase, 
Esbase,  DB2,  Red  Bricks, 
Informatics,  Data  Stage.  Ab  Initio, 
Web  Logic/Sphere,  JSP,  ASP. 
Min.  BS  w/  exp.  Please  contact 
info@sageitinc.com.  EOE 

Global  Consulting  is  looking  for 
programmer/system  analysts, 
software  engineers.  Candidate 
must  have  BS  with  IT  experience. 
Good  skills  in  C/C++,  Java, 
Oracle.  EJB,  J2BB,  WebLogic, 
VB,  HTML  are  plus.  Traveling  is 
required  for  some  positions. 
Apply  job@g-c-g.net  EOE.  No 
calls. 


Systems  Analyst  sought  by  large 
employer  in  Electronic  Print 
Svcs  Industry.  Reqs  BS  in  Engg, 
CS  or  MIS.  Min.  2  yrs  IS  exp  in  a 
high  speed  digital  print  technolo¬ 
gy  envrmt  &  using  document 
print/print  image  formats  incl 
Xerox  Meta/code  &  DJDE,  IBM 
AFP,  Adobe  PDF,  fonts,  bar¬ 
codes,  font  edit  tools,  document 
dsgn  tools.  Min.  2  yrs  exp  using 
Process  Automation  on  multiple 
platforms  (IBM  MVS,  Window, 
Unix,  HS  Printers).  Min.  2  yrs 
exp  w/VC++,  VB,  MS  Access, 
SQL,  MicroTech,  IMR  Alchemy, 
Elixir  &  CompuSet.  M-F  8-5. 
Respond  to  Scott  Erickson,  HR 
Mgr,  Moore  Wallace,  Business 
Communication  Svcs,  630  W. 
1000  North,  Logan,  UT  84321. 


IT  PROFESSIONALS 
Senior  Consultant 

(Glen  Mills,  PA  and  other  locations  throughout  the  United  States).  Respo¬ 
nsible  for  Siebel  software  development  tasks  associated  with  the  design 
and  development  for  customization  of  Siebel  applications.  Develop  Siebel 
objects  including  creation  of  business  components,  business  objects, 
applets,  views  and  screens.  Develop  Siebel  Enterprise  integration  objects 
enabling  Siebel  to  integrate  with  other  systems  including  SAP  and  Oracle 
utilizing  Siebel  Enterprise  Integration  modules.  Create  integration  objects, 
workflow  processes  and  data  mappers  and  develop  business  services  to 
incorporate  the  required  logics.  Test  workflows  and  utilize  various  Siebel 
connectors  and  adapters  enabling  Siebel  to  communicate  with  middle¬ 
ware  technologies  and  other  applications.  Utilize  Siebel  Enterprise  Integ¬ 
ration  Manager  to  load  data  into  Siebel  from  other  legacy  or  source  sys¬ 
tems.  Prepare  data  sheets  as  per  table  requirements,  write  control  files, 
mn  SQL  loader  scripts  to  load  data  in  the  interface  tables  and  create  serv¬ 
er  tasks  to  run  the  Enterprise  Integration  Manager  process.  Develop  strat¬ 
egy  documents  for  proposed  technical  solutions,  design  deliverables, 
develop  documents,  and  write  test  scripts  and  test  plans.  Responsible  for 
the  scoping  and  mapping  of  operational  reporting  requirements  to  Actuate 
Siebel  reports  with  report  parameters/filters,  and  design  the  Actuate  Sieb¬ 
el  reports.  Lead  data  integration,  and  oversee  data  conversion  and  appli¬ 
cation  configuration  efforts  including  leading  a  team  of  Siebel  developers. 
Perform  the  analysis  of  existing  business  and  system  use  cases  and  re¬ 
quirements  documentation.  Perform  accurate  analysis  and  effective  diag¬ 
nosis  of  client  issues  and  oversee  day-to-day  client  relationships  on  client 
engagements.  Implement  project  management  tools  and  create  and  ap¬ 
ply  solution  specific  methodologies  to  ensure  that  the  delivery  and  imple¬ 
mentation  of  software  solutions  meets  client  requirements  and  industry 
standards. 

$82, 650/year.  Mon-Fri  9:00am-5:00pm.  The  minimum  requirements  are 
as  follows:  Bachelor’s  degree  or  equivalent  in  Computer  Science,  Engin¬ 
eering  (any),  Information  Systems,  Mathematics,  or  Business  Administra¬ 
tion  plus  5  years  of  experience  in  the  job  offered  or  5  years  of  experience 
as  a  Senior  Consultant,  Consultant,  or  Software  Engineer.  Employer  will 
regard  a  foreign  degree  to  be  equivalent  to  a  U.S.  Bachelor's  degree  as 
determined  by  an  accredited  foreign  credentials  evaluation  service.  Relat¬ 
ed  experience  must  also  include  at  least  1  year  of  Siebel  application  de¬ 
velopment,  Siebel  enterprise  integration  development,  utilization  of  Siebel 
Enterprise  Integration  Manager,  integration  of  Siebel  with  other  applica¬ 
tions  including  SAP  or  Oracle  and  development  of  Actuate  Siebel  reports. 
Please  send  your  resume,  referencing  Job  Order  Number  WEB444901  to 
the:  PA  CareerLink,  FLC  Unit,  235  W.  Chelten  Avenue,  Philadelphia,  PA 
19144.  EOE. 


Paradigm  Technologies  is  look¬ 
ing  for  program/system  analysts, 
DBA,  s/w  engineers.  Candidates 
must  have  BS/MS  with  experi¬ 
ence.  Good  skills  in  C/C++, 
Java,  Oracle,  WebLogic,  VB, 
HTML,  ERP  are  plus.  Traveling 
required  for  some  jobs.  Please 
apply  at  jobs@paradigmtek.com. 
EOE.  No  calls. 

Stryon,  a  leader  that  provides 
Software  Transformation 
Solutions,  looks  for  IT  profes¬ 
sionals  to  develop  our  own 
migration  products,  iNET  and 
iASP  &  our  bridging  middleware 
products,  iHUB  and  R-JAX. 
Must  have  BS/MS  with  IT  exp. 
Please  send  resumes  to 
contact@stryon.com.  EOE. 


I  want  a  qualified 
IT  professional 
in  my  staff’s 
high-performance 
work 

environment 


The 

IT  Careers  Network 
will  focus  and  direct 
your  message  to  IT's 
most  impressive  audience 
—  the  experts  who  are 
helping  business  to 
succeed. 


Post  open  positions 
online  or  in  print. 
Call  (800)  762-2977 


eToys  Direct  seeks  applicants 
for  the  position  of  Web 
Applications  Developer  in 
Denver,  CO  to  design  and  devel¬ 
op  custom  web-based  software 
applications.  Requirements 
include  bachelor's  in  computer 
science  or  related  field  and 
experience  in  designing  and 
developing  web-based  applica¬ 
tions.  Requirements  also  include 
working  knowledge  of  TCL/TK, 
Expect  Programming  Language, 
Oracle  Development  and  Python 
Scripting  Language.  Respond 
by  resume  to  Gigi  Healy,  eToys 
Direct,  1099  18th  St„  #1800, 
Denver,  CO  80202. 


Database  Aps  Engr  -  Design, 
develop,  &  impl.  RDBMS  util. 
SQL  &  multi-tiered  distributed 
apps  util.  VB,  ASP.  &  HTML/XML 
to  run  on  Windows  NT  o/s.  Prov¬ 
ide  on-site  info,  systems  consul¬ 
ting  to  corp.  clients  in  order  to 
maximize  info,  system  efficien¬ 
cy.  REQS:  MS  in  CS,  Math,  Phy¬ 
sics,  or  any  Engineering  discip¬ 
line,  +  2  yrs  of  exp  in  job  offered, 
or  2  yrs  of  exp  as  a  Database 
Admin,  or  Database  Design 
Analyst.  Salary:  $65,000  to 
$80,000,  DOE.  Incl.  benes,  40 
hrs/wk.  EOE.  Job  loc:  Various 
unanticipated  locations  through¬ 
out  U.S.  Apply  by  resume  only 
to:  Job  #005087982,  Workforce 
Development  Programs,  P.O. 
Box  46547,Denver,  CO  80202. 


Computer  Support  Special¬ 
ists  -  needed  for  various 
unanticipated  locations  in 
US  to  support  clients'  tech¬ 
nical  efforts  in  building  and 
configuring  computer  sys¬ 
tems,  performing  network 
admin  and  hardware  trou¬ 
bleshooting.  BS  in  Mech¬ 
anical/Electrical  Eng  reqd. 
40  hr/wk,  $20+/hr.  Send 
resume  w /  ad  to  Ms.  Shipe, 
OAO  Services,  2266  South 
Dobson  Rd,  #209,  Mesa, 
AZ  85202. 


Systems  Analyst  w/SCSA  need¬ 
ed  at  client  sites  to  dsgn,  dvlp, 
code,  test,  debug,  modify  & 
implmt  prgms;  provide  Tier  3 
support  of  Web,  Mail,  DNS  & 
provisioning  Internet  services; 
dsgn  &  implmt  high-availabLe 
Unix  systms;  tools  incl:  JDK, 
Perl  CGI,  HTML,  Veritas  Volume 
Manager  &  Cluster  Server,  Net- 
backup,  Checkpoint  Firewall, 
Cisco  Routers,  Foundry  Switch¬ 
es,  TCP/IP  networks,  Sun  E420, 
SunE250,  Solaris,  RedHat, 
Oracle,  Sun  StorEdge  A5200, 
NETApp  F760,  DNS,  NIS  & 
NFS.  Apply  to:  Global  Consult¬ 
ants,  Attn:  Hireme,  25  Airport 
Rd,  Morristown,  NJ  07960. 


Computer  Programmers  need¬ 
ed.  Seeking  qual.  candidates 
possessing  BS  or  equiv.  and/or 
rel.  work  exp.  Part  of  the  req.  rel. 
work  exp.  must  include  2  yrs 
working  w /  Java  and  XML  and  1 
year  working  with  .Net;  experi¬ 
ence  can  be  simultaneous. 
Duties  include:  Develop  &  write 
programs;  Configure  HW/SW; 
Analyze  &  implement  remote 
control  of  Software  packages. 
Work  with  Java,  SQL,  Linux, 
.NET,  &  XML.  Send  res.,  ref.  & 
sal.  req.  to  Applianz 
Technologies,  322  S.  Mosley, 
Wichita,  KS  67202. 


Systems  Administrators  to  plan, 
design,  install,  maintain  and  ad¬ 
minister  LAN/WAN  networks;  in¬ 
stall,  configure,  administer  Win¬ 
dows  NT,  IIS  &  SQL  Servers; 
maintain  backups  and  provide 
support  for  users;  create,  main¬ 
tain  user  accounts;  manage 
communication  systems  includ¬ 
ing  Mail  servers;  evaluate  new/ 
existing  systems,  recommend 
future  IT  strategies.  Require:  BS 
of  foreign  equiv.  in  CS/ 
Engg. (any  branch)/Buss.  with  2 
yrs  exp.  in  Sys  Admin./Sys. 
Mgmt.  F/T.  Travel  Involved.  High 
Salary.  Resumes  to:  HR,  Fourth 
Technologies,  Inc.,  585  Tollgate 
Road,  Ste  I,  Elgin,  IL  60123. 


Programmer  1.  Under  supervi¬ 
sion,  design  and  implement 
applications  and  database  sup¬ 
port  tools  using  Java.  JSP  and 
stored  procedures  development 
environment;  maintain  and  ov¬ 
ersee  the  coding  standards; 
provide  technical  support  for 
resolution  of  customer  issues; 
and  function  as  mentor  to  other 
Software  Engineers  on  develop¬ 
ment  standards  and  methodolo¬ 
gy.  Must  have  Bachelor’s  in 
Computer  Science,  Engg.  or 
related,  1  yr.  exp.,  and  experi¬ 
ence  must  include  working  with 
Java,  JSP,  Struts,  XSLT,  Web¬ 
sphere,  ClearCase,  Rational 
Rose  and  Crystal  Reports. 
Send  resume  to  Praxis  Tech¬ 
nology  Group,  LLC,  Attn:  Mark 
Loomis,  1500  NW  118th  St., 
Des  Moines,  IA  50325. 


Jr.  Programmer  Analyst.  Assist 
PA  in  researching,  designing 
and  developing  s/w  for  various 
business  problems  using  J2EE 
and  object  -  oriented  design 
principles  and  technologies  incl. 
UML  and  Waterfall  models  and 
RUP  process.  Assist  in  testing 
s/w  solutions  using  Java,  J2EE, 
JSP,  Struts,  Servelts,  Swing  on 
Unix  and  Windows  NT.  Assist  in 
developing  s/w  for  SQL  Queries 
and  stored  procedures  on  SQL 
Server  and  Oracle.  Provide  test 
cases  and  other  doc.  in  CMM  5 
standards.  Req  :  BS  in  Com. 
Sci.,  or  Comp.  Info.  Sys.  or 
Comp.  Eng.  40  hrs/wk. 
Job/Interview  site:  De  Moines, 
IA.  Send  resume  to  Emprise 
Consulting  LLC,  Attn  :  Chuck 
Gutta,  2915  Redhill  Ave.,  # 
F202,  Costa  Mesa,  CA  92626. 


Control  Systems  Designer 
wanted  by  construction  sup¬ 
plies  mftr  in  IL  to  dsgn  spe¬ 
cial  controlling  systms/soft- 
ware,  dsgn/diagram  struc¬ 
tures  &  circuits.  Provide  s / 
ware  prgm  reqmt  specs; 
eval  control  dsgn  systm 
models  w/physical  models. 
Must  have  Bach  or  equiv  in 
Comp  Sci.  Respond  to:  Mr. 
Bob  Kuzy,  Universal  Form 
Clamp,  Inc.,  840  S.  25th 
Ave,  Bellwood,  IL  60104.  No 
calls. 


Better  address?  Better  compensation? 
Better  training?  Better  get  in  here! 

www.itcareers.com 

Now  powered  by  CareerJournal.com 
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A  global  software  development 
company  headquartered  in 
Newark,  DE  is  seeking  Software 
Engineers  for  Multiple  Openings: 

Duties  include:  Research, 
design  and  testing  of  software 
applications.  We  have  multiple 
positions  available  for  various 
skill  sets  which  may  include  the 
following:  Oracle,  Siebel,  C,  C++, 
Crystal  Reports,  Sybase,  DB2, 
Visual  Basic,  MSAccess,  PL/SQL, 
COBOL  JCL  CCS,  Java,  COGNOS, 
PowerBuilder,  XML  ASP,  HTML  on 
UNIX,  Solaris,  LINUX  and 
Windows  NT  operating  systems. 

All  positions  require  the 

minimum  of  a  Bachelor's  Degree 
or  U.S.  equivalent  along  with 
one  (1)  year  of  experience  in  the 
position  of  software  engineer, 
programmer  analyst,  software 
programmer,  systems  analyst, 
consultant  or  a  related/equiva¬ 
lent  occupation.  Positions 
require  extensive  travel 
and/or  relocation. 

Highly  competitive  salary  offered 
between  $52K  and  $55K.  Send 
resumes  to  Delaware 
Department  of  Labor,  Division  of 
Employment  and  Training,  4425 
North  Market  Street,  P.O.Box 
9828,  Wilmington,  DE.,  19809- 
0828.  Please  refer  to  Job  Order 
#  DE  205314. 


A  global  software  development 
company  headquartered  in 
Newark,  DE  is  seeking 
Advanced  Software  Engineers 
for  Multiple  Openings: 

Duties  include:  Research, 
design  and  testing  of  software 
applications.  We  have  multiple 
positions  available  for  various 
skill  sets  which  may  include  the 
following:  Oracle,  C,  C++, 
Crystal  Reports,  DB2,  Visual 
Basic,  MSAccess,  PL/SQL,  SQL 
Server,  COBOL,  Java  on  UNIX, 
Solaris,  and  Windows  NT  oper¬ 
ating  systems. 

All  positions  require  the 

minimum  of  a  Bachelor's  Degree 
or  U.S.  equivalent  along  with  two  to 
three  (2-3)  years  of  experience 
in  the  position  of  software  engi¬ 
neer,  programmer  analyst  software 
programmer,  systems  analyst  con¬ 
sultant  or  a  related/equivalent 
occupation  Positions  require 
extensive  travel  and/or 
relocation. 

Highly  competitive  salary  offered 
at  $84K.  Send  resumes  to 
Delaware  Department  of  Labor, 
Division  of  Employment  and 
Training,  4425  North  Market 
Street,  P.O.Box  9828, 
Wilmington,  DE.,  19809-0828. 
Please  refer  to  Job  Order 
#  DE  205261. 


PROGRAMMER/ANALYST  to 
analyze,  design,  develop,  test, 
implement  and  support  web- 
based  client/server  application 
software  using  C.  C++,  Java, 
HTML.  XML.  JSP,  Servlets,  EJB, 
CORBA,  RMI,  WebLogic,  Web¬ 
Sphere  Servers,  Oracle  and 
DB2  on  AIX-UNIX  and  SUN 
Solans  platforms.  Require:  B  S 
degree  in  Computer  Science/ 
Engineering.  or  a  closely  related 
field  with  2  yrs  of  exp  in  the  job 
offered  or  as  a  Software  Engin¬ 
eer.  Extensive  travel  on  assign¬ 
ment  to  vartous  client  sites  with¬ 
in  the  U.S.  is  required  Competi¬ 
tive  salary  offered  Apply  by 
resume  to:  Ravi  Kandimalla, 
Everest  Computers  Inc.,  875 
Old  Roswell  Road,  Ste  E-400, 
Rosweii,  GA  30076:  Attn:  Job 
GB. 


A  global  software  development 
company  headquartered  in 
Newark,  DE  is  seeking  Software 
Engineers  for  Multiple  Openings: 

Duties  include:  Research, 
design  and  testing  of  software 
applications.  We  have  multiple 
positions  available  for  various 
skill  sets  which  may  include  the 
following:  Oracle,  Siebel,  C,  C++, 
Crystal  Reports.  Sybase,  DB2, 
Visual  Basic,  MSAccess,  PL/SQL, 
COBOL,  JCL,  CICS,  Java,  COG¬ 
NOS,  PowerBuilder,  XML,  ASP, 
HTML  on  UNIX,  Solahs,  LINUX 
and  Windows  NT  operating  sys¬ 
tems. 

Ail  positions  require  the  mini¬ 
mum  of  a  Bachelor's  Degree  or 
U.S.  equivalent  along  with  one 
and  a  half  (1.5)  years  of  experi¬ 
ence  in  the  position  of  software 
engineer,  programmer  analyst, 
software  programmer,  systems 
analyst,  consultant  or  a 
related/equivalent  occupation. 
Positions  require  exten¬ 
sive  travel  and/or  relocation. 

Highly  competitive  salary  offered 
between  $54K  and  $56K.  Send 
resumes  to  Delaware  Department 
of  Labor,  Division  of  Employment 
and  Training,  4425  North  Market 
Street,  P.O.Box  9828, 
Wilmington,  DE.,  19809-0828. 
Please  refer  to  Job  Order 
#  DE  205265. 


A  global  software  development 
company  headquartered  in 
Newark,  DE  is  seeking 
Advanced  Software  Engineers 
for  Multiple  Openings: 

Duties  include:  Research, 
design  and  testing  of  software 
applications.  We  have  multiple 
positions  available  for  various 
skill  sets  which  may  include  the 
following:  Oracle,  Visual  Basic, 
SQL  Server,  Java  on  UNIX, 
and  Windows  NT  operating 
systems. 

All  positions  require  the 

minimum  of  a  Master's  Degree 
or  U.S.  equivalent  along  with 
one  (1 )  year  of  experience  in  the 
position  of  software  engineer, 
programmer  analyst,  software 
programmer,  systems  analyst, 
consultant  or  a  related/equiva¬ 
lent  occupation.  Positions 
require  extensive  travel 
and/or  relocation. 

Highly  competitive  salary  offered 
at  $84K.  Send  resumes  to 
Delaware  Department  of  Labor, 
Division  of  Employment  and 
Training,  4425  North  Market 
Street,  P.O.Box  9828, 
Wilmington,  DE.,  19809-0828. 
Please  refer  to  Job  Order 
#  DE  205529. 


COMPUTER/IT 

Program  Manager,  Software 
Engineering.  Req.  Master's 
degree  in  Eng.  or  Comp.  Sci. 
and  3  yrs.  of  software  engineer¬ 
ing  experience.  All  stated  expe¬ 
rience  must  include  utilizing 
each  of  the  following:  C,  C++. 
Visual  Basic.  CM,  JD  Edwards 
ERP  system  and  CMM  Level  2. 
Plan,  direct  and  coordinate  the 
activities  of  team  of  software 
developers  responsible  for  utiliz¬ 
ing  the  Capability  Maturity  Model 
for  Software  (CMM)  Level  2  to 
identify  the  key  practices 
required  to  assess  and  improve 
BE&K's  software  processes. 
Send  Resumes  to:  D.  Brasher, 
Job  Reference  #002,  BE&K 
Engineering  Company,  2000 
International  Park  Drive, 
Birmingham.  Alabama,  35243. 


Programmer  Analyst 
/PeopleSoft  Specialist!  - 

Multiple  Openings 

Structured  systems  analysis,  de¬ 
sign,  development,  modification, 
testing,  quality  assurance,  imp¬ 
lementation,  integration,  mainte¬ 
nance  and  support  of  large  vol¬ 
ume  online  complex  integrated 
client-server  based  financial  and 
human  resource  management 
application  systems  in  a  multi¬ 
hardware/multi-software  envi¬ 
ronment  using  centralized  or 
distributed  Relational  Database 
Management  Systems  (RDB¬ 
MS)  such  as  DB2.  Oracle,  Sy¬ 
base,  SQL  Server,  SQL  Base 
and  related  software.  Bachelor's 
Degree  (or  equivalent)  in  Com¬ 
puter  Science-Math/Engineering 
/Science/Business-Commerce 
and  1  yr.  experience  in  job  of¬ 
fered  or  as  Programmer  Analyst/ 
Systems  Analyst  are  required. 
Must  have  appropriate  combina¬ 
tion  of  skills  as  follows:  1  of  A 
and  3  of  B.  A  includes  People- 
Soft  Financials,  PeopleSoft 
Human  Resource  Management 
and  B  includes  PeopleTools, 
PeopleCode,  SQR,  Crystal  Re¬ 
ports,  COBOL:  High  mobility 
preferred.  40  hrs/week,  8  am  -  5 
pm.  $66,533  -  $78,000  per  year. 
Qualified  applicants  should  con¬ 
tact  or  send  resume  to:  BECS/ 
CareerLink  Program  Supervisor, 
Indiana  County  CareerLink,  300 
Indian  Springs  Road,  Indiana, 
PA  15701.  Refer  to  Job  Order  # 
WEB  444189. 


Information  Specialist  (Miramar, 
FL)  -  Design,  construct,  test  and 
implement  applications  for 
sales,  revenue  and  reservation 
systems  in  the  transportation 
industry  using  Java  and  COBOL 
in  UNIX,  MVS  and  Windows 
environment;  apply  CMM  level  3 
practices  and  SCL  software 
development  life  cycle  method¬ 
ology  to  develop  software;  col¬ 
lect,  define  and  organized 
detailed  user  requirements 
through  interaction  with  cus¬ 
tomer;  define  scope,  plans  and 
deliverables  for  projects;  enter 
program  codes  into  computer 
system.  Requires  Bachelors  in 
Electrical  Engineering  or 
Computer  Science  and  either  4 
yrs  exp  in  job  offered  or  4  yrs 
exp  in  designing  and  construct¬ 
ing  applications  for  sales,  rev¬ 
enue  and  reservation  systems  in 
the  transportation  industry  using 
Java  and  COBOL  in  UNIX. 
Salary  $65,000/yr,  Mon-Fri, 
8AM-5PM.  40  hrs/wk.  Send 
resume  to  Workforce  Program 
Support,  P.O.  Box  10869, 
Tallahassee,  FL  32302-0869, 
refer  to  J.O.  #  FL-2543510. 


CONSULTING  SERVICES  EN¬ 
GINEER  to  study  and  analyze 
business  processes  of  client 
companies  to  optimize  efficiency 
of  their  transportation  and  sup¬ 
ply-chain  resources;  Develop 
large  scale  logistics  decision 
support  systems  and  cutting 
edge  decision  tools  using  scien¬ 
tific  analysis,  mathematical  mod¬ 
els  and  algorithms,  as  well  as 
computer  skills  including  Visual 
Studio.NET,  VB.NET,  CM,  SQL, 
XML,  ASP.NET,  ADO.NET,  MS 
MapPoint,  MS  Source  Safe  and 
Remote  Administrator  on  Win¬ 
dows  2000/XP/NT  platforms; 
Develop  and  maintain  database 
architecture  for  business  object 
representation  and  distributed 
processing  using  SQL  Server 
2000;  Design  and  test  highly- 
efficient  complex  database  ob¬ 
jects  including  stored  proce¬ 
dures,  functions,  triggers  and 
constraints.  Require:  M.S.  de¬ 
gree  in  Computer  Science,  an 
Engineering  discipline,  or  a 
closely  related  field  with  2  yrs.  of 
exp.  in  the  job  offered.  Extensive 
travel  on  assignment  to  various 
client  sites  within  the  U.S.  is 
required  Competitive  salary  of¬ 
fered.  Apply  by  resume  to: 
Manoj  Madhavan,  Hybrid 
Solutions,  Inc.,  4600  Avocet 
Drive,  Norcross,  GA  30092;  Attn: 
Job  SK. 


IT  PROFESSIONALS  NEEDED 
MindTree  Consulting,  an  estab¬ 
lished  and  expanding  IT  consult¬ 
ing  company  offering  product 
realization  services  to  Internet 
infrastructure  and  device  ven¬ 
dors.  is  searching  for  qualified  IT 
professionals  to  join  its  growing 
team.  Presently,  we  have  posi¬ 
tions  for  Technical  Architects, 
Software  Consultants  (systems 
analysts.  P/As,  Soft.  Enggs.). 
Experience  with  Cisco  Router, 
Compaq  servers,  Implemented 
Checkpoint  network  security 
firewalls.  Rational  Rose,  iPlanet 
Webserver,  Sun  Microsystem's 
J2EE  architecture  desired.  Qual¬ 
ified  applicants  will  have  a  bach¬ 
elor's  degree  in  a  relevant  field 
and/or  qualifying  industry  experi¬ 
ence.  Positions  may  require 
relocation  to  various  client  sites 
throughout  the  United  States. 
Qualified  applicants  submit 
resumes  to  HR  Department,  The 
Tower  at  270  Davidson  Avenue, 
Suite  305,  Somerset,  NJ  08873. 


Senior  Software  Engineer  to 
lead  a  team  in  the  design,  devel¬ 
opment,  implementation,  test¬ 
ing,  maintenance,  and  support¬ 
ing  application  software  in  a 
client/server  environment  using 
object  oriented  programming, 
Oracle,  Java,  J2EE,  JSP, 
Servlet,  JDBC,  EJB,  J2C,  JMS, 
JAAS,  HTML,  XML,  UML, 
RDBMS,  Struts,  JavaScript,  MS- 
Project,  WSAD,  and  WAS  under 
UNIX  and  Windows  operating 
systems;  Supervise  and  mentor 
junior  programmers.  Require: 
B.S.  degree  in  Computer 
Science,  an  Engineering  disci¬ 
pline,  or  a  closely  related  field 
with  five  years  of  progressively 
responsible  experience  in  the 
job  offered  or  as  a  Systems 
Analyst.  Extensive  travel  on 
assignments  to  various  client 
sites  within  the  U.S.  is  required. 
Competitive  salary  offered. 
Send  resume  to  Sophie 
Mookerjie,  President  SPI,  3901 
Roswell  Road,  Suite  134, 
Marietta,  GA  30062.  Job:  JR 


PROGRAMMER  ANALYST  - 
Consult  with  client  to  determine 
technical  requirements,  evaluate 
client’s  existing  software,  hard¬ 
ware  and  operating  systems  and 
analyze  to  determine  necessary 
changes  and  modifications. 
Develop  necessary  program¬ 
ming  applications  using  tools 
such  as  VISUAL  BASIC,  VISU¬ 
AL  FOXPRO  and  SQL.  Salary 
$57,449.60/yr.,  40  hr.  work  wk. 
(9:00  a.m.  to  5:00  p.m.).  Re¬ 
quirements;  B.A.  in  Engineering 
or  Computer  Science  &  One  yr. 
Experience  Programmer  Analyst 
to  include  development  of  client 
programming  using  VISUAL 
BASIC  and  SQL.  Employer  Paid 
Ad.  Send  resumes  to  MDCD, 
P.O.  Box  11170,  Detroit,  Ml 
48202-1170  (Ref.  #212196). 


Director  of  Engineering  (with 
Masters  and  4  years  experi¬ 
ence  or  Bachelors  with  9  years 
experience)  -  St.  Louis,  MO. 
Job  entails  and  requires  expe¬ 
rience  in  project  management 
and  design  and  development 
of  applications  using  Java, 
VC++.  VB,  .Net,  Java2D, 
CORBA,  COM,  Adobe  Post¬ 
script,  and  Adobe  PDF. 
Relocation  within  USA  possi¬ 
ble.  Attractive  compensation 
package.  Send  resume  to  Rod 
Zimmerman,  Dynalivery  Corp., 
320  Westport  Plaza,  Suite  205, 
St.  Louis,  MO  63146. 


IT  CAREER  OPPORTUNITIES 

CALIFORNIA  -  (Corporate  HQ. 
Employment  is  throughout  US): 
Sr.  Computer  Scientist 
Systems  Analyst 

Positions  require  a  BS  and  rele¬ 
vant  experience;  a  combination 
of  experience  and  college  level 
education  may  be  accepted.  The 
flexibility  to  travel  and  be  on-call 
may  be  necessary.  Proof  of  legal 
authorization  to  work  in  the  U.S. 
is  required. 

Please  forward  your  resume  to 
Computer  Sciences  Corp.,  Attn: 
J.  Le,  2100  E.  Grand  Ave.,  Mail 
Code  A209,  El  Segundo,  CA 
90245.  Please  indicate  the  spe¬ 
cific  job  title  and  location  for 
which  you  are  applying. 


Database  Administrator,  Ft. 
Lauderdale,  FL:  Define  &  ad¬ 
minister  database  organiza¬ 
tions,  standards  &  procedures 
using  RDB,  VMS,  SQL  Server, 
Java,  J2EE,  WebSphere,  XML, 
Visual  Basic,  Cold  Fusion, 
DHTML,  &  Rational.  Must  have 
Bachelor's  Degree  in  Com¬ 
puter  Science  &  3  yrs,  exp.  in 
job  offered  or  with  all  phases  of 
software  development  life 
cycle.  Mail  resume  to  ref  #220, 
HR-Program,  Spherion  Corp¬ 
oration,  2050  Spectrum  Blvd., 
Ft.  Lauderdale,  FL  33309. 


Abbott  Laboratories  seeks  quali¬ 
fied  Systems  Analysts,  Data¬ 
base  Administrators,  Applica¬ 
tions  Programmers,  Software 
Engineers  and  Software  Spec¬ 
ialists  with  experience  in  one  or 
more  of  the  following  technolo¬ 
gies:  SAP,  ABAP.  BASIS,  RDB¬ 
MS,  SUN  UNIX,  Solaris,  Oracle, 
AS/400,  PL/SQL,  Visual  Basic, 
C/C++,  Windows,  UNIX,  SAS, 
HTML,  XML,  Java,  JSP,  Java¬ 
Script,  Documentum,  LAN, 
Lotus  Notes.  Respond  by  mail  to 
Abbott  Laboratories,  Dept.  323, 
Bldg.  AP6D2,  100  Abbott  Park 
Road,  Abbott  Park  IL  60064- 
32537.  An  EOE.  Refer  to  ad 
code:  IT-KE. 


Software  Engineer 

Requ:  B.Sc.  Elec. 
Eng  &  2  yrs  exp. 
Send  resume  to  Jyoti 
Maewall,  Computer 
Data  Circuit,  Inc,  69 
Milk  St,  Suite  220, 
Westboro,  MA01581. 


Multiple  positions  available  for 
computer  professionals  includ¬ 
ing  Soft.  Eng.'s,  Programmers. 
Jr  Programmers,  Systems 
Analysts,  Network  Analysts. 
DBA'S,  etc.  Locations  vary. 
Req's  BS,  MS,  or  equiv.  depend¬ 
ing  on  pos.  &  1-2  yrs  exp 
depending  on  pos.  For  some 
positions,  we  also  accept  any 
suitable  combination  of  educa¬ 
tion,  training  or  experience  in 
lieu  of  the  req.  edu  Travel/fre¬ 
quent  relocation.  E.O.E. 
Competitive  salary  &  benefits. 
Resume  to:  Pinnacle  Talent.  Inc. 
Attn:  HR  1919,  Midwest  Road, 
Suite  210,  Oakbrook  IL  60523, 
Job  ID  #:  FL8-11-04. 
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“They  haven’t  shown  up  yet,” 
Slattery  said.  Normally,  the  sys¬ 
tems  would  have  arrived  within 
five  days,  according  to  Slattery. 
He  said  that  when  they  didn’t, 
he  called  HP  and  was  told  the 
servers  were  back-ordered. 

Slattery  added  that  he  didn’t 
know  what  was  causing  the 
shipment  delay  until  he  heard 
HP  executives  discuss  the  or¬ 
der-processing  problems  here 
at  the  HP  World  conference, 
which  was  sponsored  by  the 
independent  Interex  and  En¬ 
compass  user  groups.  “I  never 
put  it  down  to  the  supply 
chain  mess,”  he  said. 

Kees  denHartigh  had  a  dif¬ 
ferent  type  of  problem  with  an 
HP  hardware  delivery.  A  sys¬ 
tems  and  network  analyst  at 
the  University  of  Alberta  in 
Edmonton,  denHartigh  placed 
an  order  with  HP  last  spring 
for  new  equipment  that  includ¬ 
ed  Opteron-based  servers  and 
a  storage  array.  He  said  that  not 
one  but  two  deliveries  showed 
up  at  the  school  in  June,  lead¬ 
ing  him  to  call  HP  as  well. 


“They  were  right  upfront 
about  it,”  denHartigh  said. 
“They  were  merging  the  ERP 
systems  between  Compaq  and 
HP,  and  they  had  some  issues 
with  duplication  of  the  whole 
process.  So  the  order  went  in 
at  two  places.”  The  extra 
equipment  is  still  boxed, 
awaiting  its  return  to  the  ven¬ 
dor,  he  added. 

HP  officials  have  said  that 
the  supply  chain  problems 
stemmed  from  a  poorly  exe¬ 
cuted  migration  to  a  new 
order-processing  system 
based  on  SAP  AG’s  ERP  appli¬ 


cations  [QuickLink  48819]. 

HP’s  overall  revenue  rose 
9%  in  its  third  quarter,  which 
ended  July  31.  But  its  enter¬ 
prise  server  and  storage  busi¬ 
ness  fell  5%,  prompting  CEO 
Carly  Fiorina  to  fire  three  ex¬ 
ecutives  because  of  what  she 
called  “unacceptable  execu¬ 
tion”  within  that  unit. 

Mark  Gonzalez,  vice  presi¬ 
dent  of  enterprise  server  and 
storage  sales  for  HP  Americas, 
said  the  troubles  began  over 
the  July  4  weekend,  when  HP 
went  live  with  the  SAP-based 
system  to  replace  three  order¬ 


processing  applications  that  it 
had  after  its  2002  acquisition 
of  Compaq  Computer  Corp. 

“It’s  systems  talking  to  sys¬ 
tems,”  Gonzalez  said.  “It  just 
did  not  quite  work  out.”  He 
added  that  customers  should 
no  longer  experience  delays 
on  storage  products  or  Unix 
servers.  Processing  of  Pro¬ 
Liant  server  orders  is  “pretty 
much  back  on  track,  with  the 
exception  of  a  couple  of  com¬ 
plex,  configure-to-order  type 
things,”  Gonzalez  said.  “The 
worst  is  behind  us.” 

At  the  conference,  HP  offi¬ 
cials  were  also  adamant  that 
the  company  won’t  make  any 
changes  in  its  technology  direc¬ 
tion  because  of  the  poor  third- 
quarter  results.  But  that  didn’t 
stop  users  such  as  Paul  Gerke, 
systems  administrator  for 
Clark  County  in  Vancouver, 
Wash.,  from  voicing  concern 
about  the  possibility  that  HP 
could  alter  some  of  its  system 
development  plans. 

“Quarterly  news  can  change 
very  quickly,”  said  Gerke,  who 
manages  HP-UX  systems.  Re¬ 
ferring  to  HP’s  decision  to 
phase  out  its  HP  3000  mini¬ 
computer  line,  he  said,  “You 


have  to  wonder,  if  we  start  see¬ 
ing  declining  results  for  Unix, 
is  that  the  next  thing  [to  go]?” 

John  Hohenfeld,  operations 
manager  at  the  55,000-student 
Cuyahoga  Community  College 
in  Cleveland,  said  HP’s  finan¬ 
cial  results  “made  me  wonder 
a  little,  but  I  think  they  are 
very  safe”  as  a  vendor. 

Safe  for  users,  perhaps.  But 
when  Denys  Beauchemin, 
chairman  of  Interex’s  board  of 
directors,  opened  the  floor  for 
questions  during  a  panel  ses¬ 
sion  featuring  HP  executives, 
he  invited  attendees  to  “fire 
away”  with  their  questions. 

That  choice  of  words 
prompted  one  HP  official  on 
the  panel  to  quickly  retort, 
“Don’t  fire  away,”  drawing 
laughter  from  the  audience. 

O  48966 


Robert  McMillan  of  the  IDG 
News  Service  contributed  to 
this  story. 
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Offshore  customer  support  and  the  future 
of  HP-related  conferences  were  also  hot 
topics  at  HP  World: 

QuickLink  48979 
www.computerworld.com 


HP  Exec  Blames  Server  Shortfall  on  ‘Internal  Execution  Issues’ 


BY  ROBERT  McMILLAN  AND 
PATRICK  THIBODEAU 

When  HP 
missed  earn¬ 
ings  expecta¬ 
tions  for  its 
third  quarter 
two  weeks  ago, 
the  company 
placed  the 
blame  squarely 
on  the  shoul¬ 
ders  of  its  Enterprise  Servers  and 
Storage  division  -  leading  to  the 
sacking  of  three  senior  execu¬ 
tives  within  that  unit  [QuickLink 
48813], 

Ann  Livermore,  executive 
vice  president  of  HP’s  Technolo¬ 
gy  Solutions  Group,  manages 
servers  and  storage  as  well  as 


the  vendor’s  software  and  IT  ser¬ 
vices  units.  She  spoke  with  Com- 
puterworld and  the  IDG  News 
Service  at  HP  World. 

Why  did  the  enterprise  com¬ 
puting  group  lose  money  in 
the  third  quarter?  There  were 
really  a  couple  of  main  areas 
where  we  didn’t  execute  as  well 
as  we  needed  to  this  quarter.  In 
the  United  States,  we  were  tran¬ 
sitioning  to  a  new  system  and  set 
of  business  processes  for  our  or¬ 
der  management  and  manufac¬ 
turing  operations,  and  that  transi¬ 
tion  caused  more  disruption  than 
we  had  planned. 

In  Europe,  we  had  some  issues 
around  our  channel  management 
processes.  We  also  had,  in  a  few 


instances  in  [Europe,  the  Middle 
East  and  Africa],  more  aggressive 
discounting  than  what  we  had 
originally  planned  for.  So  the 
good  news  -  or  the  bad  news  -  is 
that  they  are  all  internal  execution 
issues  we  can  address  ourselves. 
They’re  not  things  that  are  funda¬ 
mental  weaknesses  in  our  busi¬ 
ness  offerings. 

You’re  getting  rid  of  the  Alpha 
chip  and  moving  from  PA- 
RISC  to  Itanium.  Is  there  any 
sense  that  the  decline  in  sales 
may  be  indicative  of  cus¬ 
tomers  just  not  wanting  to 
move  to  Itanium?  No.  What 
we’re  seeing  with  Itanium  is  that 
our  quarter-to-quarter  ramp  is  as 
we’ve  expected.  And  our  Unix 


growth  last  quarter  was  8°/o, 
which  is  a  good  year-over-year 
growth  rate. 

When  you  say  Unix  growth 
was  8%,  do  you  mean  on  Ita¬ 
nium?  Unix  growth  overall. 

What  was  it  just  on  Itanium? 

You  know,  I  didn’t  bring  with  me 
the  specific  breakdown  in  terms 
of  what  the  PA-RISC  growth  was 
versus  the  Itanium.  But  the  thing 
we’re  seeing  that  we  like  from  an 
Itanium  perspective  is  that  the 
ISV  [independent  software  ven¬ 
dor]  applications  and  ports  are 
going  really  well.  Our  ISV  partners 
have  all  believed  that  the  migra¬ 
tion  has  been  easier  than  what 
we  planned. 


IBM  is  sticking  with  its  Power 
architecture,  and  Sun  is  stick¬ 
ing  with  UltraSparc.  Is  any¬ 
thing  in  your  financial  results 
or  in  the  feedback  you  get 
from  users  giving  you  grounds 
for  doubt  about  HP’s  Itanium- 
only  strategy?  No.  And  we  don’t 
have  an  Itanium-only  strategy. 
From  a  customer  perspective,  we 
have  a  very  simple  set  of  archi¬ 
tectures:  We  have  Itanium,  and 
we  have  x86.  A  lot  of  the  power 
of  HP  from  a  computing  perspec¬ 
tive  is  we  do  offer  both. 


McMillan  is  a  reporter  for  the 
IDG  Newsservice. 

READ  MORE  ONLINE 

An  expanded  version  of  this  interview 
can  be  found  on  our  Web  site: 

QuickLink  48879 
www.computerworld.com 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 


The  Power  of  No 


IT  WAS  JUST  LAST  YEAR  that  the  London  borough  of 

Newham  couldn’t  afford  to  upgrade  its  aging  Microsoft  Ex¬ 
change  5.5  server.  Then  Newham  contacted  an  open-source 
consulting  firm,  Netproject,  for  a  study  to  see  whether  Linux 
desktops  would  be  a  workable  option  for  the  local  govern¬ 
ment.  By  November,  there  was  a  credible  Linux  plan  set  for  adop¬ 
tion,  subject  to  further  negotiations  with  Microsoft. 

Last  week,  Newham  announced  a  new  10-year,  $9  million  deal 
with  Microsoft.  The  local  government  that  couldn’t  afford  an  Ex¬ 
change  upgrade  will  now  get  that,  plus  up-to-date  desktop  software, 
plus  a  batch  of  tablet  PCs  for  the  borough’s  social  workers. 

Now  that’s  bargaining  power. 


Officially,  Newham’s  decision  was  based  in 
large  part  on  a  Capgemini  study,  commissioned 
by  Microsoft,  that  concluded  that  Newham 
would  not  only  save  a  bundle  by  staying  with 
Windows,  but  would  also  have  fewer  security 
problems.  Yeah,  right. 

Unofficially,  and  much  more  believably,  the 
deal  went  down  like  this:  Newham  had  a  viable 
Linux  alternative  to  Windows  (and  a  lot  of 
press  attention  for  being  a  highly  visible  Linux 
poster  child).  Microsoft  negotiated.  Newham 
ended  up  with  a  truckload  of  goodies  that  it 
couldn’t  afford  before. 

Pretty  slick,  eh?  True,  the  Linux  advocates  say 
they  feel  used.  They’re  right  —  they  were  used. 
All  the  available  evidence  suggests  that  New¬ 
ham’s  IT  boss,  Richard  Steel,  never  really  want¬ 
ed  to  go  through  the  expense  and  trouble  of 
dumping  Windows  and  all  the  other  Microsoft 
products  Newham  was  using  in  favor  of  Linux 
and  open-source  alternatives. 

But  when  Steel  went  to  negotiate  the  deal 
with  Microsoft,  that  competing 
open-source  proposal  was  on  the 
table.  It  meant  Steel  could  walk 
away  from  Microsoft  if  he  had  to. 

He  had  the  power  to  say  no  to  any¬ 
thing  short  of  the  deal  he  wanted. 

Was  it  a  bluff?  Only  Steel  knows, 
and  he’s  not  saying.  But  Microsoft 
believed  Newham  could  go  with 
Linux.  Microsoft  wasn’t  willing  to 
take  that  chance.  And  that  got 
Newham  one  heck  of  a  deal. 

Think  you  can’t  possibly  get  that 
kind  of  leverage  in  your  own  deal¬ 
ings  with  software  vendors?  You’re 
probably  right  —  chances  are,  you 


don’t  want  that  much  publicity  for  any  IT-relat¬ 
ed  negotiation. 

But  can  you  take  a  few  lessons  from  the 
Newham  deal?  Sure. 

Start  by  remembering  that  if  you  can’t  say  no, 
it’s  not  a  negotiation.  If  you  can’t  walk  away 
from  the  table,  you  have  no  leverage  at  all. 

So  be  sure  you  always  have  a  viable  alterna¬ 
tive  when  you  sit  down  with  a  vendor.  Maybe 
that  means  one  or  more  competitors’  products. 
Maybe  it  means  open-source.  Or  a  homegrown 
system.  Or  just  standing  pat.  But  make  sure  you 
can  say  no. 

Then  forget  about  being  a  nice  guy.  Use  those 
competitors  against  one  another.  Somebody  in 
this  deal  is  going  to  lose.  Make  sure  it’s  not  you. 

Know  what  you  want  to  get  from  the  deal, 
what  your  bottom  line  is  and  how  much  it  will 
take  to  get  you  to  say  yes.  But  don’t  say  yes  until 
the  other  guy  has  run  out  of  things  to  offer. 

Take  your  time  —  the  Newham  deal  took 
months  to  finalize.  Keep  upper  management  in 
the  loop,  so  you  won’t  be  undercut 
when  somebody  gets  unhappy  at 
how  things  are  going. 

And  when  the  time  comes,  do 
the  deal  and  damn  the  conse¬ 
quences.  The  losers  will  howl  be¬ 
cause  they  lost.  The  winners  will 
moan  because  you  squeezed  them 
so  hard.  That’s  OK  —  you  don’t 
work  for  them. 

For  the  organization  you  do  work 
for,  you  may  not  get  a  Newham- 
size  advantage.  But  if  Newham  can 
do  it,  you  can  too.  And  these  days, 
you  need  all  the  bargaining  power 
you  can  get.  O  48930 


FRANK  HAYES.  Computef- 
world's  senior  news  colum¬ 
nist,  has  covered  IT  for  more 
than  20  years.  Contact  him  at 

frank.hayes@computerworid.com. 


That  Would  Explain  It 

Help  desk  staffer  complains  that  her  voice-over-IP 
phone  calls  are  breaking  up.  So  the  network  team 
puts  a  sniffer  on  the  line  and  tracks  down  something 
on  the  network  that’s  using  a  lot  of  bandwidth.  “The 
bandwidth  hog  is  listening  to  an  Internet  radio  station,” 
says  a  pilot  fish  on-scene.  “And  it’s  the  caller’s  own 
PC.”  Her  response?  “Ohhhhh.  I  did  notice  it  started 
about  the  time  I  started  listening  to  that  radio  station." 


All  Wet 

Yes,  this  user 
did  spill  water 
in  his  keyboard. 

But  he  has  dried 
it  out  pretty  well,  he  tells 
help  desk  pilot  fish.  Still, 
when  he  tries  to  type 
using  one  of  the  keys 
that  got  wet,  the  system 
acts  up  or  reboots.  Is  it 
because  the  keyboard  is 
still  damp?  “I  explained 
that  by  hitting  a  key,  he 
was  causing  an  electri¬ 
cal  circuit  to  close,  but 
because  of  the  water, 
he  was  closing  multiple 
circuits  and  sending  bad 
signals  to  the  comput¬ 
er,”  says  fish.  User’s 
reply:  “No  I’m  not.  I’m 
just  typing.” 

The  Front  Page 

This  user  is  furious  - 
information  is  missing 
from  an  inventory  report, 
and  she  needs  it  right 
away.  “I  stay  late  into 
the  night  poring  through 
code  for  this  complicat¬ 
ed  application,”  says 
programmer  pilot  fish. 
“Finally,  at  10  p.m.,  I  run 
the  report  myself  and 
find  that  the  information 
she  was  asking  about  is 
in  the  report.”  On  the 
first  page,  in  fact.  Next 
morning,  fish  asks  to  see 
the  user’s  copy  and  dis¬ 
covers  that  the  top  page 
says  “2  of  117.”  “Oh,” 
user  tells  fish,  “I  must 
have  left  Page  1  on  the 
printer.” 


Idiot?  You? 

The  printer 
isn’t  working 
for  this  auto 
mechanic,  so 
support  pilot  fish  walks 
him  through  the  usual 
questions:  Is  it  plugged 
in?  Cable  connected  to 
the  printer?  Any  alarm 
lights?  “What,  do  you 
think  I’m  an  idiot?”  me¬ 
chanic  snaps.  Next,  fish 
steps  mechanic  through 
the  process  of  printing  a 
test  page.  Did  anything 
print  out?  fish  asks  him. 
“Not  yet,"  says  mechan¬ 
ic.  “Let  me  put  paper  in 
it  first.” 

Nope,  Not  Me 

It’s  the  mid-1960s,  and 
this  military  unit  is  just 
starting  to  send  files 
electronically  from  base 
to  headquarters.  ‘The 
only  problem  was  that 
we  had  to  connect 
through  a  switchboard,” 
says  a  pilot  fish  who  was 
there.  “If  the  operator 
would  ‘plug  in'  to  listen, 
an  error  would  be  gener¬ 
ated  in  the  data.”  Fish 
explains  this  to  the  oper¬ 
ator  -  but  the  next  time 
his  unit  sends  data,  the 
errors  are  back.  “We 
called  the  operator  and 
said  that  we  asked  her 
to  not  listen  in  to  the 
transmission,”  fish 
reports.  “Her  reply?  ‘I 
didn’t  listen  in!  Besides, 
it  was  just  a  lot  of  beeps 
and  noise  anyway.’  ” 
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OSHARKY  WANTS  DATA,  NOT  NOISE.  Send  me  your 

true  tale  of  IT  life  at  sharky@computerworld.com.  If 
1  use  it,  you'll  snag  a  snazzy  Shark  shirt.  And  check  out  the 
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home  delivery  at  computerworid.com/sharky. 
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Learn  from  Top  CIOs 

DENNIS  CALLAHAN 

EVP  &  CIO 
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GREGORY  S.  JACKSON 

CIO 
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Visit  the  DMTF  Technology  Showcase! 

While  at  EMW,  you  can  also  tour  the  DMTF  Technology  Showcase, 
which  will  feature  demonstrations  of  the  latest  standards-based 
technologies  from  vendors  and  standards  bodies  such  as  the  Storage 
Networking  Industry  Association  (SNIA),  The  Open  Group  and  the 
Distributed  Management  Task  Force  (DMTF). 
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Conference  for: 

•  Enterprise  IT  Management 

•  Data  Center  Management 

•  Networked  Server 

and  Storage  Management 

•  Network  and  Communications 
Management 

•  Infrastructure  and  Data  Architects 

•  Systems  Integration  Specialists 

•  Enterprise  Security  Management 

To  register  or  for  more  information, 
visit  www.emwusa.com/cw 
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Introducing  the  new  WatchGuard  Firebox®  X  Edge.  A  tough  firewall  and  VPN  endpoint  for  real  protection  at  your  vulnerable  perimeter.  Connect  it  to  any 
Firebox  X  appliance  and  get  real-time  central  management  and  monitoring  at  no  additional  charge.  It’s  smart.  It’s  model-upgradeable.  It’s  the  security 
you  really  need.  For  more  information  and  availability,  visit  www.watchguard.com/info/8cw23 
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